Hi,
yes.
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/Cisco-SD-Access-SD-WAN-Integrated-Domain-Guide.pdf
Q. Does Cisco Catalyst SD-WAN support third-party integration with Security Information and Event Management (SIEM) providers?
A. Yes, Cisco Catalyst SD-WAN offers third-party integration capabilities. It seamlessly integrates with leading SIEM providers, including Splunk, Microsoft Sentinel and Live Action. These integrations provide significant benefits, enhancing the security landscape for users. By capturing crucial data points and offering a holistic view of network security events, Cisco Catalyst SD-WAN empowers organizations to efficiently detect and respond to security incidents.
HTH,
Please rate and mark as an accepted solution if you have found any of the information provided useful.