How-To: Export EZSSH Logs to a SIEM Solution

Learn how to export EZSSH audit logs to your SIEM, including Microsoft Sentinel, CloudWatch, CrowdStrike Falcon, Datadog, Huntress, and Kafka, to monitor all SSH access requests.

⚠️ This step is optional

While this step is recommended, it is not required to use EZCA. If you do not have a SIEM solution or do not want to send your logs to your SIEM, you can skip this step.

How-To: Export EZSSH Logs to Azure Sentinel

Learn how to export EZSSH audit logs to Microsoft Sentinel through your Log Analytics workspace, then query SSH access requests with sample KQL queries in Azure Sentinel.

How-To: Export your EZSSH Logs to CrowdStrike Falcon

Learn how to monitor your SSH access requests by sending all security logs to your CrowdStrike Falcon SIEM provider.

How-To: Export EZSSH Logs to CloudWatch

Learn how to monitor your SSH access requests by sending all security logs to your CloudWatch SIEM provider.

How-To: Export EZSSH Logs to Kafka

Learn how to monitor your SSH access requests by sending all security logs to your Kafka SIEM provider.

How-To: Export EZSSH Logs to Datadog

Learn how to monitor your SSH access requests by sending all security logs to your Datadog SIEM provider.

How-To: Export EZSSH Logs to Huntress

Learn how to export EZSSH audit logs to Huntress SIEM through an HTTP Event Collector, then create Huntress alerts to detect SSH key reuse and other risky SSH activity.