René's URL Explorer Experiment


Title: Collect SecureAuth Identity Platform logs  |  Google Security Operations  |  Google Cloud Documentation

Open Graph Title: Collect SecureAuth Identity Platform logs  |  Google Security Operations  |  Google Cloud Documentation

Opengraph URL: https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/secureauth-sso

direct link

Domain: cloud.google.com


Hey, it has json ld scripts:
  {
    "@context": "https://schema.org",
    "@type": "Article",
    
    "headline": "Collect SecureAuth Identity Platform logs"
  }
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [{
      "@type": "ListItem",
      "position": 1,
      "name": "Google Security Operations",
      "item": "https://docs.cloud.google.com/chronicle/docs"
    },{
      "@type": "ListItem",
      "position": 2,
      "name": "Collect SecureAuth Identity Platform logs",
      "item": "https://docs.cloud.google.com/chronicle/docs/ingestion/default-parsers/secureauth-sso"
    }]
  }
  

google-signin-client-id721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com
google-signin-scopeprofile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/devprofiles.full_control.firstparty
og:site_nameGoogle Cloud Documentation
og:typewebsite
theme-color#1a73e8
NoneIE=Edge
og:imagehttps://docs.cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png
og:image:width1200
og:image:height630
og:localeen
twitter:cardsummary_large_image

Links:

Skip to main content https://cloud.google.com/chronicle/docs/ingestion/default-parsers/secureauth-sso#main-content
https://cloud.google.com/
Documentation https://docs.cloud.google.com/docs
Get Started with Google Cloud https://docs.cloud.google.com/docs/get-started
Product List https://docs.cloud.google.com/docs/product-list
Cloud Customer Care https://docs.cloud.google.com/support/docs
Agent Platform https://docs.cloud.google.com/products/gemini-enterprise-agent-platform
Apigee API Management https://docs.cloud.google.com/apigee
BigQuery https://docs.cloud.google.com/bigquery
Compute Engine https://docs.cloud.google.com/products/compute
Cloud CDN https://docs.cloud.google.com/cdn
Cloud Run https://docs.cloud.google.com/run
Cloud Storage https://docs.cloud.google.com/storage
Cloud SQL https://docs.cloud.google.com/sql
Gemini Enterprise https://docs.cloud.google.com/gemini/enterprise/docs
Google Kubernetes Engine https://docs.cloud.google.com/kubernetes-engine
Looker https://docs.cloud.google.com/looker
Access and resources management https://docs.cloud.google.com/docs/access-resources
Costs and usage management https://docs.cloud.google.com/docs/costs-usage
Infrastructure as code https://docs.cloud.google.com/docs/iac
SDK, languages, frameworks, and tools https://docs.cloud.google.com/docs/devtools
AI and ML https://docs.cloud.google.com/docs/ai-ml
Application development https://docs.cloud.google.com/docs/application-development
Application hosting https://docs.cloud.google.com/docs/application-hosting
Compute https://docs.cloud.google.com/docs/compute-area
Data analytics and pipelines https://docs.cloud.google.com/docs/data
Databases https://docs.cloud.google.com/docs/databases
Distributed, hybrid, and multicloud https://docs.cloud.google.com/docs/dhm-cloud
Industry solutions https://docs.cloud.google.com/docs/industry
Migration https://docs.cloud.google.com/docs/migration
Networking https://docs.cloud.google.com/docs/networking
Observability and monitoring https://docs.cloud.google.com/docs/observability
Security https://docs.cloud.google.com/docs/security
Storage https://docs.cloud.google.com/docs/storage
Console https://console.cloud.google.com/
https://docs.cloud.google.com/chronicle/docs
Google Security Operations https://docs.cloud.google.com/chronicle/docs
Start freehttps://console.cloud.google.com/freetrial
Overview https://docs.cloud.google.com/chronicle/docs
Guides https://docs.cloud.google.com/chronicle/docs/secops/secops-overview
Use cases https://docs.cloud.google.com/chronicle/docs/use-cases
Reference https://docs.cloud.google.com/chronicle/docs/reference/google-secops-api-libraries-overview
Support https://docs.cloud.google.com/chronicle/docs/secops/release-notes
Resources https://docs.cloud.google.com/chronicle/docs/resources
https://cloud.google.com/
Documentation https://cloud.google.com/docs
Overview https://cloud.google.com/chronicle/docs
Guides https://cloud.google.com/chronicle/docs/secops/secops-overview
Use cases https://cloud.google.com/chronicle/docs/use-cases
Reference https://cloud.google.com/chronicle/docs/reference/google-secops-api-libraries-overview
Support https://cloud.google.com/chronicle/docs/secops/release-notes
Resources https://cloud.google.com/chronicle/docs/resources
Console https://console.cloud.google.com/
Google SecOps overviewhttps://cloud.google.com/chronicle/docs/secops/secops-overview
Google Unified Security overviewhttps://cloud.google.com/chronicle/docs/secops/google-unified-security
Recommended Google Unified Security productshttps://cloud.google.com/chronicle/docs/secops/google-unified-security-recommended
Understand the Google SecOps platformhttps://cloud.google.com/chronicle/docs/secops/understand-the-secops-platform
Google SecOps architecturehttps://cloud.google.com/chronicle/docs/secops/secops-architecture
Data ingestion overviewhttps://cloud.google.com/chronicle/docs/secops/secops-ingestion
UDM overviewhttps://cloud.google.com/chronicle/docs/event-processing/udm-overview
Applied Threat Intelligence overviewhttps://cloud.google.com/chronicle/docs/detection/applied-threat-intel-overview
Get started with YARA-Lhttps://cloud.google.com/chronicle/docs/yara-l/getting-started
Investigation and case management overviewhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/cases-overview
Investigate alerts and entity contexthttps://cloud.google.com/chronicle/docs/investigation/Investigate-alert-entity-context
Playbook automation overviewhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/whats-on-the-playbooks-screen
Embed AI agents in playbookshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/agentic-automation
Respond to alerts and caseshttps://cloud.google.com/chronicle/docs/secops/respond-cases
Content Hub overviewhttps://cloud.google.com/chronicle/docs/secops/content_hub
Ingestion metrics overviewhttps://cloud.google.com/chronicle/docs/ingestion/understand-ingestion-metrics
Dashboards overviewhttps://cloud.google.com/chronicle/docs/reports/native-dashboards
Overviewhttps://cloud.google.com/chronicle/docs/secops/gemini-secops
Google SecOps packages overviewhttps://cloud.google.com/chronicle/docs/secops/secops-packages
Google SecOps Security Tokens overviewhttps://cloud.google.com/chronicle/docs/agentic-soc/security-tokens
Access a Google SecOps instancehttps://cloud.google.com/chronicle/docs/onboard/log-in-to-new-instance
Log in to Google SecOpshttps://cloud.google.com/chronicle/docs/log-in-to-ui
Use SecOps Chathttps://cloud.google.com/chronicle/docs/secops/gemini-docs
Navigate the Google SecOps platformhttps://cloud.google.com/chronicle/docs/secops/navigate-the-secops-platform
Configure user preferenceshttps://cloud.google.com/chronicle/docs/secops/user-preferences
Deploy an instancehttps://cloud.google.com/chronicle/docs/onboard
Deploy an additional instancehttps://cloud.google.com/chronicle/docs/onboard/provision-additional-instance
Understand your billinghttps://cloud.google.com/chronicle/docs/onboard/understand-billing
Configure a Google Cloud projecthttps://cloud.google.com/chronicle/docs/onboard/configure-cloud-project
Link an instance to Google Cloudhttps://cloud.google.com/chronicle/docs/onboard/link-chronicle-cloud
Configure Google Cloud identityhttps://cloud.google.com/chronicle/docs/onboard/configure-cloud-authentication
Configure third-party identityhttps://cloud.google.com/chronicle/docs/onboard/configure-authentication
Change authenticationhttps://cloud.google.com/chronicle/docs/onboard/change-third-party-idp
Configure feature accesshttps://cloud.google.com/chronicle/docs/onboard/configure-feature-access
Data RBAC overviewhttps://cloud.google.com/chronicle/docs/administration/datarbac-overview
Configure data RBAChttps://cloud.google.com/chronicle/docs/administration/configure-datarbac-users
Overviewhttps://cloud.google.com/chronicle/docs/administration/datarbac-impact
Control access to dashboardshttps://cloud.google.com/chronicle/docs/administration/configure-datarbac-dashboards
Control access to data tableshttps://cloud.google.com/chronicle/docs/administration/configure-datarbac-data-tables
Control access to 1P cases and alertshttps://cloud.google.com/chronicle/docs/administration/datarbac-impact-cases
Control access to reference listshttps://cloud.google.com/chronicle/docs/administration/configure-datarbac-reference-lists
Configure legacy RBAChttps://cloud.google.com/chronicle/docs/administration/rbac
Overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/control-access-to-platform
Overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/permissions/working-with-permission-groups
Understand user groupshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/what-types-of-user-groups-are-there
Create a managed userhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/create-a-managedmanagedplus-user
Create a collaborator userhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/create-a-collaborator-user
Create a view-only userhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/create-a-view-only-user
Manage SOC roleshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/permissions/working-with-roles
Overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/work-with-environments
Manage environment groupshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/environment-groups
Configure custom environment groupshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/using-dynamic-parameters-in-environments
Enable SOAR accesshttps://cloud.google.com/chronicle/docs/secops/enable-soar-access
Map users with Cloud identityhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/map-users-in-the-secops-platform-first-party
Map users with third-party identityhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/map-users-in-the-secops-platform
Apply multiple control access parametershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/map-users-with-multiple-control-access-parameters
Enable federated accesshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/case-federation-secops
View all usershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/where-can-i-see-all-the-users
Delete a user accounthttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/how-can-i-disabledelete-a-user-account-in-chronicle-soar
Supported compliance standardshttps://cloud.google.com/chronicle/docs/secops/compliance
Data encryption at rest and in transithttps://cloud.google.com/chronicle/docs/secops/data-encryption
Configure CMEKhttps://cloud.google.com/chronicle/docs/secops/cmek_for_secops
Configure VPC service controlshttps://cloud.google.com/chronicle/docs/secops/vpcsc-for-secops
Configure MCPhttps://cloud.google.com/chronicle/docs/secops/use-google-secops-mcp
Define a landing pagehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/permissions/define-landing-page-on-login
Rebrand your platformhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/rebranding
Set time zonehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/setting-time-zone-for-all-users-admin
Configure email settingshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/setting-up-your-email
Manage preview featureshttps://cloud.google.com/chronicle/docs/secops/preview-features-manage
Configure SIEM data retentionhttps://cloud.google.com/chronicle/docs/about/data-retention
Configure SOAR data retentionhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/define-system-data-retention
Manage audit logshttps://cloud.google.com/chronicle/docs/administration/audit-logging
Monitor SOAR activityhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/monitoring-user-activities
Create custom listshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/create-custom-lists
Create email HTML templateshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/create-email-html-templates
Create email templateshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/create-email-templates
Add variables to email templateshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/using-dynamic-variables-in-email-html-templates
Create user requestshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/define-requests-for-users-admin
Manage properties metadatahttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/manage-properties-metadata
Manage statisticshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/soar-statistics
Retrieve raw Python logshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/retrieve-raw-python-logs
Manage case stageshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/adddelete-case-stages-admin
Configure case naming conventionshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/naming-a-case-admin
Create custom fields for caseshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/adding-custom-fields
Manage custom case closure fieldshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/custom-fields-in-case-closure
Configure the close case dialoghttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/add-new-case-close-root-cause-admin
Configure the default case viewhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/define-default-view-for-cases-admin
Configure alert groupinghttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/alert-grouping-mechanism-admin
Configure alert overflowhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/define-alert-overflow-admin
Configure the default alert viewhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/define-default-alert-view-admin
Exclude entities from alertshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/create-block-list-to-exclude-entities-from-alerts
Manage case and alert tagshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/define-tags-in-cases-admin
Manage networkshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/manage-networks
Define domains for MSSPshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/define-domains-for-mssps
Manage environment load balancinghttps://cloud.google.com/chronicle/docs/soar/admin-tasks/configuration/environment-load-balancing
Overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-to-gcp
Pre-migration validation guidehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/soar-pre-validation
Manage MSSP migrationhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-soar-mssp-instance
Migrate SOAR permissions to IAMhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-soar-permissions-iam
Map SOAR permissions to IAMhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/map-soar-permissions-to-iam
Migrate to Chronicle APIhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/api-migration-guide
SOAR API mapping tablehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/endpoint-mapping-table
Migrate remote agent authentication infrastructurehttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/migrate-remote-agent-to-google
Authenticate remote agents with Workload Identity Federationhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/authenticate-remote-agent-with-workload-identity-federation
Frequently asked questionshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/migrate-soar-faq
SIEM migration overviewhttps://cloud.google.com/chronicle/docs/administration/migrate-legacy-siem-infra
Migrate to a Google Cloud projecthttps://cloud.google.com/chronicle/docs/administration/migrate-to-gcp-project
Migrate to Google Cloud authenticationhttps://cloud.google.com/chronicle/docs/administration/migrate-from-legacy-auth-to-gcp-auth
Migrate from legacy RBAC to feature RBAChttps://cloud.google.com/chronicle/docs/administration/migrate-from-legacy-rbac-to-feature-rbac
Overviewhttps://cloud.google.com/chronicle/docs/administration/migrate-from-legacy-api-to-chronicle-api
SIEM API endpoint mappinghttps://cloud.google.com/chronicle/docs/administration/siem-endpoint-mapping-table
Verify firewall configuration for the Chronicle APIhttps://cloud.google.com/chronicle/docs/reference/verify-firewall-configuration
Upgrade cloud storage data feeds to v2https://cloud.google.com/chronicle/docs/administration/upgrade-data-feeds-v2
Migrate an instance to a BYOP projecthttps://cloud.google.com/chronicle/docs/administration/migrate-instance-from-one-project-to-another
Migrate CBN alerts to YARA-L alertshttps://cloud.google.com/chronicle/docs/detection/migrate-cbn-alerts
Migrate from CrowdStrike Detects API to Alerts APIhttps://cloud.google.com/chronicle/docs/detection/migrate-detects-api-to-alerts-api
Deprovisionhttps://cloud.google.com/chronicle/docs/onboard/customer-initiated-secops-deprovision
Content Hub overviewhttps://cloud.google.com/chronicle/docs/secops/content_hub2
Run use cases from the Content Hubhttps://cloud.google.com/chronicle/docs/soar/marketplace/run-use-cases
Connectorshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/connectors
Email utilitieshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/email-utilities
Enrichmenthttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/enrichment
File utilitieshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/file-utilities
Functionshttps://cloud.google.com/chronicle/docs/soar/marketplace-and-integrations/power-ups/functions
GitSynchttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/gitsync
Image utilitieshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/image-utilities
TemplateEnginehttps://cloud.google.com/chronicle/docs/soar/marketplace-and-integrations/power-ups/templateengine
Insightshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/insights
Listshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/lists
Toolshttps://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/tools
Use the IDEhttps://cloud.google.com/chronicle/docs/soar/respond/ide/using-the-ide
Develop your first custom integrationhttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/my-first-integration
Develop your first custom actionhttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/my-first-action
Develop your first email connectorhttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/my-first-connector
Develop your first use casehttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/my-first-use-case
Build custom integrationshttps://cloud.google.com/chronicle/docs/soar/respond/ide/building-a-custom-integration
Create custom actionshttps://cloud.google.com/chronicle/docs/soar/respond/ide/creating-a-custom-action
Create actions with Gemini in the IDEhttps://cloud.google.com/chronicle/docs/soar/respond/ide/create-ide-actions-gemini
Write automated jobshttps://cloud.google.com/chronicle/docs/soar/respond/jobs-scheduler/writing-jobs
Create a custom connectorhttps://cloud.google.com/chronicle/docs/soar/respond/ide/creating-a-custom-connector
Build connector logichttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/developing-the-connector
Configure custom connectorshttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/configuring-the-connector
Test custom connectorshttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/testing-the-connector
Map and model alertshttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/mapping--modeling
Publish custom integrationshttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/requirements-for-publishing-integration
Develop custom transformershttps://cloud.google.com/chronicle/docs/soar/respond/custom-transformers-logical-operators
Configure calculated fields for caseshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/calculated-fields
Configure response integrationshttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/configure-integrations
Roll back response integrationshttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/version-rollback
Upgrade the Python versionhttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/upgrade-python-versions
Manage integration dependencieshttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/managing-integration-dependencies
Support multiple instanceshttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/supporting-multiple-instances
Test response integrationshttps://cloud.google.com/chronicle/docs/soar/respond/ide/test-integrations-in-staging-mode
Manage secrets with secret managershttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/working-with-an-external-vault-system
Overviewhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/what-is-a-remote-agent
Review deployment requirementshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/requirements-and-prerequisites
Review data flow and protocolshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/data-flows-and-protocols
Remote agent securityhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/remote-agent-security
Deploy with Dockerhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/deploy-agent-with-docker
Deploy with Podmanhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/deploy-agent-with-podman
Deploy on Debianhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/create-agent-with-installer-on-debian
Deploy on RHELhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/create-agent-with-installer-for-rhel
Deploy on CentOShttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/create-agent-with-installer-on-centos
Configure high availabilityhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/deploy-high-availability-for-remote-agents
Redeploy connectorshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/redeploy-connectors-remote-agents
Configure Workload Identity Federationhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/authenticate-remote-agent-with-workload-identity-federation
Configure the Installer and Dockerhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/installer-and-docker-agent-configuration
Configure remote executionhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/set-up-integrations-and-connectors
Test the connection flowhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/test-agents
Remote agent scaling strategyhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/remote-agent-scaling-strategy
Monitor and manage remote agentshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/manage-remote-agents
Perform a standard upgradehttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/upgrade-remote-agents
Major upgrade with Dockerhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/upgrade-agent-docker-image
Major upgrade with Podmanhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/upgrade-agent-podman-image
Major upgrade with RHELhttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/upgrade-agent-requirements-for-rhel
Major upgrade with CentOShttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/upgrade-agent-requirements-for-centos
Redeploy remote agentshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/redeploy-agent
Troubleshoot remote agentshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/troubleshooting
Contribute community response integrationshttps://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/integrations-guidelines
Become a technology partnerhttps://cloud.google.com/chronicle/docs/technology-partner-program
Overviewhttps://cloud.google.com/chronicle/docs/secops/secops-ingestion2
Ingestion methods and data typeshttps://cloud.google.com/chronicle/docs/ingestion/data-types
Ingest and parse log datahttps://cloud.google.com/chronicle/docs/ingestion/log-ingestion-and-parsing
Parsers overviewhttps://cloud.google.com/chronicle/docs/event-processing/parsing-overview
Data feeds overviewhttps://cloud.google.com/chronicle/docs/administration/feed-management-overview
Data enrichment and aliasing overviewhttps://cloud.google.com/chronicle/docs/event-processing/overview-of-aliasing-and-enrichment
Work with the feeds UIhttps://cloud.google.com/chronicle/docs/administration/feed-management
Create an Azure event hub feedhttps://cloud.google.com/chronicle/docs/administration/create-azure-feed
Ingest data with API connectorshttps://cloud.google.com/chronicle/docs/reference/feed-management-api
Ingest data with the Ingestion APIhttps://cloud.google.com/chronicle/docs/reference/ingestion-api
Ingest Google Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ingest-gcp-logs
Set up a SOAR webhookhttps://cloud.google.com/chronicle/docs/soar/ingest/webhooks/setting-up-a-webhook
Set up a SIEM webhookhttps://cloud.google.com/chronicle/docs/ingestion/setup-siem-webhook
Deploy the Bindplane agent for collectionhttps://cloud.google.com/chronicle/docs/ingestion/use-bindplane-agent
Ingest data using SOAR connectorshttps://cloud.google.com/chronicle/docs/soar/ingest/connectors/ingest-your-data-connectors
Map custom date and time in Elasticsearchhttps://cloud.google.com/chronicle/docs/soar/ingest/connectors/elasticsearch-connector-mapping-custom-datetime
Define environments in SOAR connectorshttps://cloud.google.com/chronicle/docs/soar/ingest/connectors/defining-environments-in-connectors
Install and configure the forwarderhttps://cloud.google.com/chronicle/docs/install/install-forwarder
Configure forwarders in the platformhttps://cloud.google.com/chronicle/docs/install/forwarder-management-configurations
Manage forwarder configurations manuallyhttps://cloud.google.com/chronicle/docs/install/forwarder-configuration-manual
Install Windows forwarder executablehttps://cloud.google.com/chronicle/docs/install/forwarder-windows
Ingest logs with Cloud Run functionshttps://cloud.google.com/chronicle/docs/ingestion/ingest-using-cloud-functions
Configure partner-hosted integrationshttps://cloud.google.com/chronicle/docs/reference/partner-hosted-siem-integrations
Default parsers and log types overviewhttps://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers
List of default parser configuration guideshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/default-parser-configuration
Request prebuilt and create custom log typeshttps://cloud.google.com/chronicle/docs/event-processing/request-log-type
Support policy for standard parsershttps://cloud.google.com/chronicle/docs/ingestion/standard-parser-support-policy
Apigee logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-apigee-x
AWS CloudTrail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-cloudtrail
AWS EC2 Hosts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-ec2-hosts
AWS EC2 Instance logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-ec2-instances
Chrome management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/chrome-management
Cisco ASA firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-asa-firewall
Cloud SQL context Logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/gcp-sql-context
Resource Manager context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/gcp-resource-manager-context
CrowdStrike Falcon logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cs-edr
Duo Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-activity
Fluentd logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fluentd
Fortinet Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-firewall
Google Cloud Abuse Events logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-abuse-events
Google Cloud Audit Logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloudaudit
Google Cloud BigQuery context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/collect-gcp-bigquery-context-logs
Google Cloud DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-dns
Google Cloud Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-firewall
Google Cloud IAM context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/collect-gcp-iam-context-logs
Google Cloud Kubernetes context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/gcp-kubernetes-context
Google Cloud Load Balancing logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-loadbalancing
Google Cloud NAT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloud-nat
Google Cloud Run functions logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/gcp-cloud-functions-context
Google Cloud SQL logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloudsql
Google Kubernetes Engine (GKE) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kubernetes-node
Google Workspace logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/workspace-activity
Jamf parsers overviewhttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ingest-jamf-logs
Jamf Protect logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-protect
Jamf Telemetry logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-telemetry
Jamf Telemetry v2 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-telemetry-v2
Jamf Threat Events logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-threat-events
Microsoft 365 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/office-365
Microsoft Defender for Endpoint logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-defender-endpoint
Microsoft Graph API alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-graph-alert
Microsoft Windows AD logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-ad
Microsoft Windows DHCP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-dhcp
Microsoft Windows DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-dns
Microsoft Windows Event logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/winevtlog
Microsoft Windows Sysmon logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-sysmon
Network Connectivity Center context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/gcp-network-connectivity-context
NIX System logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nix-system
OCSF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ocsf
OSSEC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ossec
osquery logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/osquery-edr
Palo Alto Networks firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-firewall
Security Command Center findingshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-security-command-center-findings
SentinelOne Alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentinelone-alert
SentinelOne Cloud Funnel logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentinelone-cf
Splunk CIM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/splunk
Zeek (Bro) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bro-json
Zscaler CASB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-casb
Zscaler parsers overviewhttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ingest-zscaler-logs
Zscaler Deception logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-deception
Zscaler DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-dlp
Zscaler DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-dns
Zscaler Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-firewall
Zscaler Internet Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-internet-access
Zscaler Tunnel logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-tunnel
Zscaler VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-vpn
Zscaler Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-webproxy
Zscaler ZPA logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-zpa
Zscaler ZPA Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-zpa-audit
Zscaler Email DLPhttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-email-dlp
A10 Network Load Balancer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/a10-load-balancer
Abnormal Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/abnormal-security
Absolute Secure Endpoint logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/absolute-se
Acalvio logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/acalvio
Active Countermeasures AI-Hunter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ai-hunter
ADVA Fiber Service Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/adva-fsp
Agiloft logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/agiloft
AIDE (Advanced Intrusion Detection Environment) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aide
Airlock Digital Application Allowlisting logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/airlock-digital
AIX system logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aix-system
Akamai Cloud Monitor logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-cloud-monitor
Akamai DataStream 2 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-datastream-2
Akamai DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-dns
Akamai EAA (Enterprise Application Access) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-eaa
Akamai Guardicore Segmentation logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/guardicore-centra
Akamai SIEM Connector logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-siem-connector
Akamai WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-waf
Akeyless Vault logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/akeyless-vault
Alcatel switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/alcatel-switch
AlphaSOC alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/asoc-alert
AlgoSec Security Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/algosec
Alveo Risk Data Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/alveo-rdm
Amazon CloudFront logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-cloudfront
AMD Pensando DSS firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/amd-dss-firewall
Anomali ThreatStream IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/anomali-ioc
Ansible AWX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ansible-awx
Apache logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/apache
Apache Cassandra logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cassandra
Apache Hadoop logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hadoop
Apache Tomcat logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tomcat
Appian Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/appian-cloud
Apple macOS syslog datahttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/macos
AppOmni logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/appomni
Aqua Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aqua-security
Arbor Edge Defense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/arbor-edge-defense
Archer IRM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/archer-irm
ArcSight CEF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/arcsight-cef
Arista VeloCloud SD-WAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/velo-firewall
Arista switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/arista-switch
Area 1 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/area1
Armis Activities logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/armis-activities
Armis Alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/armis-alerts
Armis Devices logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/armis-devices
Armis Vulnerabilities logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/armis-vulnerabilities
Array Networks SSL VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/arraynetworks-vpn
Aruba AirWave logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-airwave
Aruba ClearPass logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/clearpass
Aruba EdgeConnect SD-WAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-edgeconnect-sdwan
Aruba IPS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-ips
Aruba switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-switch
Aruba Wireless Controller and Access Point logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-wireless
Asset Panda logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/asset-panda
Atlassian Bitbucket logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/atlassian-bitbucket
Atlassian Cloud Admin Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/atlassian-audit
Atlassian Confluence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/atlassian-confluence
Atlassian Jira logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/atlassian-jira
Attivo Networks BOTsink logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/attivo
Auth0 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/auth-zero
Automation Anywhere logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/automation-anywhere
Avatier logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/avatier
Avaya Aura logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/avaya-aura
Avigilon Access Control Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/avigilon-access-logs
Aware audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aware-audit
Aware Signals logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aware-signals
AWS API Gateway access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-api-gateway
AWS Aurora logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-aurora
AWS CloudWatch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-cloudwatch
AWS Config logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-config
AWS Control Tower logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-control-tower
AWS ECS Metrics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-ecs-metrics
AWS Elastic Load Balancing logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-elb
AWS Elastic MapReduce logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-emr
AWS GuardDuty logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/guardduty
AWS IAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-iam
AWS Inspector logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-inspector
AWS Key Management Service logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-kms
AWS AWS Lambda Function logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-lambda-function
AWS Macie logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-macie
AWS Network Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-network-firewall
AWS RDS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-rds
AWS Redshift logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-redshift
AWS Route 53 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-route-53
AWS S3 server access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-s3-server-access
AWS Security Hub logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-security-hub
AWS Session Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-session-manager
AWS VPC Flow logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-vpc-flow
AWS VPC Transit Gateway flow logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-vpc-transit-gateway
AWS VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-vpn
AWS WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aws-waf
Azion firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azion
Azure AD Sign-In logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-ad-signin
Azure API Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-api-management
Azure APP Service logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-app-service
Azure Application Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-gateway
Azure Cosmos DB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-cosmos-db
Azure Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-firewall
Azure NSG Flow logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-nsg-flow
Azure Storage Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-storage-audit
Azure VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-vpn
Azure WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-waf
Barracuda CloudGen Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/barracuda-cloudgen-firewall
Barracuda Email Security Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/barracuda-email
Barracuda WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/barracuda-waf
Barracuda Web Filter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/barracuda-webfilter
BeyondTrust BeyondInsight logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-beyondinsight
BeyondTrust EPM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-endpoint
BeyondTrust Privileged Identity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-pi
BeyondTrust Remote Support logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bomgar
BeyondTrust Secure Remote Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-sra
Big Switch BigCloudFabric logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bigswitch-bcf
Bitdefender logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bitdefender
Bitwarden Enterprise event logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bitwarden-event
BloxOne Threat Defense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bloxone
BlueCat DDI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bluecat-ddi
BlueCat Edge logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bluecat-edge
Blue Coat ProxySG logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bluecoat-webproxy
BMC AMI Defender logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bmc-ami-defender
BMC Client Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bmc-client-management
BMC Helix Discovery logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bmc-helix-discovery
Box Collaboration JSON logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/box
Broadcom CA PAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/broadcom-ca-pam
Broadcom SSL VA logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/broadcom-ssl-va
Broadcom Support Portal Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/broadcom-support-portal
Broadcom Symantec SiteMinder Web Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ca-sso-web
Brocade ServerIron logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/brocade-serveriron
Brocade switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/brocade-switch
CA ACF2 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ca-acf2
CA LDAP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ca-ldap
Cambium Networks logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cambium-networks
Carbon Black App Control logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cb-app-control
Carbon Black EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cb-edr
Cato Networks logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cato-networks
Censys logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/censys
Centripetal Networks IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/centripetal-ioc
Cequence Bot Defense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cequence-bot-defense
Check Point Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-audit
Check Point EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-edr
Check Point firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-firewall
Check Point Harmony logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-harmony
Check Point SmartDefense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-smartdefense
ChromeOS XDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/chromeos-xdr
Cimcor CimTrak logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cimcor
CipherTrust Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ciphertrust-manager
CircleCI audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/circleci
CIS Albert alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cis-albert-alert
Cisco AMP for Endpoints logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-amp
Cisco APIC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-apic
Cisco Application Centric Infrastructure (ACI) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-aci
Cisco Application Control Engine (ACE) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-ace
Cisco CallManager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-call-manager
Cisco CloudLock CASB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-cloudlock-casb
Cisco CTS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-cts
Cisco DNA Center Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-dnac
Cisco eStreamer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-estreamer
Cisco Firepower NGFW logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-firepower-firewall
Cisco FireSIGHT Management Center logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-firesight
Cisco Firewall Service Module (FWSM) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-fwsm
Cisco Identity Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oort
Cisco IronPort logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-ironport
Cisco IOS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-ios
Cisco ISE logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-ise
Cisco Meraki logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-meraki
Cisco PIX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-pix-firewall
Cisco Prime logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-prime
Cisco Router logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-router
Cisco Secure Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-secure-access
Cisco Secure ACS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-acs
Cisco Secure Email Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-email-security
Cisco Secure Workload logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-secure-workload
Cisco Stealthwatch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-stealthwatch
Cisco Switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-switch
Cisco UCS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-ucs
Cisco Umbrella Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-umbrella-audit
Cisco Umbrella Cloud Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/umbrella-firewall
Cisco Umbrella DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/umbrella-dns
Cisco Umbrella IP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/umbrella-ip
Cisco Umbrella Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/umbrella-webproxy
Cisco VCS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-vcs
Cisco Vision Dynamic Signage Director logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-stadiumvision
Cisco vManage SD-WAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-sdwan
Cisco VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-vpn
Cisco Web Security Applicance (WSA) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-wsa
Cisco Wireless Intrusion Prevention System (WIPS) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-wips
Cisco Wireless LAN Controller (WLC) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-wireless
Cisco Wireless Security Management (WiSM) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cisco-wsm
Citrix Analytics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/citrix-analytics
Citrix Monitor Service logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/citrix-monitor
Citrix Receiver logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/csg-citrix-rx
Citrix StoreFront logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/citrix-storefront
ClamAV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/clam-av
Claroty CTD logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/claroty-ctd
Claroty xDome for Healthcare logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/medigate-iot
Claroty xDome logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/claroty-xdome
Cloud Identity Devices logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloudidentity-devices
Cloud Identity Device Users logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloudidentity-deviceusers
Cloud Intrusion Detection System (Cloud IDS) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-ids
Cloud Monitoring alerting activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-monitoring-alerts
Cloud Next Generation Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-ngfw-enterprise
Cloud Run logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudrun
Cloud Storage Context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-storage-context
Cloudflare logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudflare
Cloudflare Page Shield logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudflare-pageshield
Cloudflare WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudflare-waf
Cloudian HyperStore logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudian-hyperstore
CloudM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudm
CloudPassage Halo logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-passage
Code42 Incydr core datasetshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/code42-incydr
Cofense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cofense-triage
Cohesity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cohesity
Colinet Trotta GAUS SEGUROS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ct-gaus-seguros
Comforte SecurDPS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/comforte-securdps
Commvault logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/commvault
CommVault Backup and Recovery logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/commvault-br
Comodo AV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/comodo-av
Compute Engine context logshttps://cloud.google.com/chronicle/docs/ingestion/cloud/context-parsers/collect-compute-context-logs
Context Access Aware datahttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/chrome-enterprise-premium
Corelight Sensor logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/corelight
COVID-19 Cyber Threat Coalition IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/covid-ctc-ioc
Cribl Stream logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cribl-stream
CrowdStrike Falcon logs in CEFhttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/crowdstrike-cef
CrowdStrike Falcon Stream logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cs-stream
CrowdStrike FileVantage logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cs-filevantage
CrowdStrike IDP Services logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cs-idp
CrowdStrike IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/crowdstrike-ioc
CrushFTP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/crushftp
CSV Custom IOC fileshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/csv-custom-ioc
Custom Application Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/custom-application-access
Custom DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/custom-dns
Custom Security Data Analytics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/custom-security-data-analytics
Cyber 2.0 IDS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyber-2-ids
CyberArk EPM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-epm
CyberArk logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark
CyberArk PAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-pam
CyberArk Privilege Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-privilege-cloud
CyberArk Privileged Threat Analytics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-pta
Cybereason EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cybereason-edr
CyberGatekeeper NAC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cybergatekeeper-nac
CyberX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberx
Cylance PROTECT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cylance-protect
Cynet 360 AutoXDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cynet-360-autoxdr
Cyolo OT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyolo-ot
D3 Banking logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/d3-banking
Datadog logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/datadog
Dataminr Alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dataminr-alert
Darktrace logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/darktrace
Deep Instinct EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/deep-instinct-edr
Delinea Distributed Engine logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/delinea-distributed-engine
Delinea PAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/delinea-pam
Delinea Secret Server logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/delinea-secret-server
Delinea SSO logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/centrify-sso
Dell CyberSense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-cybersense
Dell ECS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-ecs
Dell EMC Data Domain logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-emc-data-domain
Dell EMC Isilon NAS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-emc-nas
Dell EMC PowerStore logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-emc-powerstore
Dell OpenManage logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-openmanage
Dell switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-switch
Desynova Contido logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/desynova-contido
DHS IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dhs-ioc
DigiCert audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digicert
Digi Modems logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digi-modems
DigitalArts i-Filter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digitalarts-ifilter
Digital Guardian EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digitalguardian-edr
Digital Shadows Indicators logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digital-shadows-ioc
Digital Shadows SearchLight logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digital-shadows-searchlight
DMP Entre logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dmp-entre
DNSFilter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dnsfilter
DomainTools Iris Investigate resultshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/domaintools-threatintel
Dope Security SWG logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/dope-swg
Druva Backup logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/druva-backup
Duo administrator logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-admin
Duo authentication logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-auth
Duo entity context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-context
Duo Telephony logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-telephony
Duo User context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/duo-user-context
Edgio WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/edgio-waf
EfficientIP DDI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/efficientip-ddi
Elastic Auditbeat logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/elastic-auditbeat
Elastic Defend logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/elastic-defend
Elastic Packet Beats logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/elastic-packetbeats
Elasticsearch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/elastic-search
Elastic Windows Event Log Beats logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/elastic-winlogbeat
Endpoint Protector DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/endpoint-protector-dlp
Entrust nShield HSM audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/entrust-hsm
Epic Systems logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/epic
Ergon Informatik Airlock IAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ergon-informatik-airlock-iam
ESET AV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/eset-av
ESET EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/eset-edr
ESET Threat Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/eset-ioc
Evision FircoSoft logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/evision-fircosoft
ExtraHop DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/extrahop-dns
ExtraHop RevealX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/extrahop
Extreme switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/extreme-switch
Extreme Wireless logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/extreme-wireless
F5 AFM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-afm
F5 ASM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-asm
F5 BIG-IP APM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-bigip-apm
F5 BIG-IP ASM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-bigip-asm
F5 BIG-IP LTM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-bigip-ltm
F5 DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-dns
F5 Distributed Cloud Services logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-dcs
F5 Shape logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-shape
F5 Silverline logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-silverline
F5 VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/f5-vpn
Falco IDS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/falco-ids
Fastly CDN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fastly-cdn
Fastly WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fastly-waf
Fidelis Network logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fidelis-network
File Scanning Framework logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/file-scanning-framework
FileZilla FTP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/filezilla-ftp
FingerprintJS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fingerprint-js
FireEye alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-alert
FireEye eMPS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-emps
FireEye ETP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-etp
FireEye HX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-hx
FireEye HX Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-hx-audit
FireEye NX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-nx
FireEye NX Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-nx-audit
FireEye PX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fireeye-px
Fivetran logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fivetran
Forcepoint CASB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-casb
Forcepoint DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-dlp
Forcepoint Email Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-emailsecurity
Forcepoint Mail Relay logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-mail-relay
Forcepoint NGFW logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-firewall
Forcepoint Web Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forcepoint-webproxy
Forescout eyeInspect logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forescout-eyeinspect
Forescout NAC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forescout-nac
ForgeRock OpenAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/openam
ForgeRock OpenDJ logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/opendj
ForgeRock OpenIDM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forgerock-openidm
Forseti Open Source logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forseti
Fortinet DHCP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-dhcp
Fortinet FortiAnalyzer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fana
Fortinet FortiAuthenticator logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortiauthenticator
Fortinet FortiClient logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-forticlient
Fortinet FortiDDoS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortiddos
Fortinet FortiEDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortiedr
Fortinet FortiMail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortimail
Fortinet FortiManager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortimanager
Fortinet FortiNAC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortinac
Fortinet FortiSASE logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortianalyzer
Fortinet FortiSandbox logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-sandbox
Fortinet Switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-switch
Fortinet Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-webproxy
FortiWeb WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortinet-fortiweb
Fortra Digital Guardian DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/digitalguardian-dlp
Fortra Powertech SIEM Agent logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/fortra-powertech-siem-agent
GitGuardian Enterprise logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gitguardian-enterprise
GitHub audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/github
GitLab logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gitlab
Gmail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gmail-logs
Google App Engine logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-app-engine
Google Cloud IoT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-cloudiot
Google Cloud Compute context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-compute-context
Google Cloud Compute logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-compute
Google Cloud DNS Threat Detector logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-dns-atd
Google Cloud Identity Context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-identity-context
Google Cloud IDS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-ids
Google Cloud Looker Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/looker-audit
Google Cloud Secure Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-swp
Google Cloud VPC Flow logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-vpc-flow
Group-IB Threat Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/group-ib
H3C Comware Platform Switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/h3c-switch
HackerOne logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hackerone
Halcyon Anti-Ransomware logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/halcyon
HAProxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/haproxy
Harness IO audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/harness-io
HashiCorp audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hashicorp
HCL BigFix logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hcl-bigfix
HID DigitalPersona logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hid-digitalpersona
Hillstone Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hillstone-ngfw
Hitachi Content Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hitachi-cloud-platform
Honeyd logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/honeyd
HP Linux logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hp-linux
HP ProCurve logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hp-procurve
Huawei Switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/huawei-switch
HPE Aruba Networking Central logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-central
HPE BladeSystem c7000 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hpe-bladesystem-c7000
HPE Nimble Storage OS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nimble-os
HUMAN Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/perimeterx-bot-protection
HYPR MFA logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/hypr-mfa
IBM AS/400 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-as400
IBM CICS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-cics
IBM DB2 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/db2-db
IBM Guardium logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/guardium
IBM Informix logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/informix
IBM MaaS360 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-maas360
IBM Mainframe Storage logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-mainframe-storage
IBM OpenPages logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-openpages
IBM QRadar logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-qradar
IBM Security Access Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-sam
IBM Security Identity Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-sim
IBM Security Verify SaaS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-security-verify-saas
IBM Tivoli logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-tivoli
IBM Verify Identity Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-sva
IBM WebSphere Application Server logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-websphere-app-server
iBoss Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/iboss-webproxy
Identity and Access Management (IAM) Analysis context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/iam-analysis
Illumio Core logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/illumio-core
Imperva Advanced Bot Protection logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-abp
Imperva Attack Analytics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-attack-analytics
Imperva Audit Trail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-audit-trail
Imperva CEF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-cef
Imperva Database logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-db
Imperva Data Risk Analytics (DRA) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-dra
Imperva FlexProtect logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-flexprotect
Imperva SecureSphere Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-securesphere
Imperva WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/imperva-waf
Infoblox logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/infoblox-dns
Infoblox RPZ logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/infoblox-rpz
Intel 471 Malware Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/intel471-malware-intel
Intel 471 Watcher Alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/intel471-watcher-alerts
Intel Endpoint Management Assistant logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/intel-ema
InterSystems Caché logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/intersystems-cache
ION Spectrum logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ion-spectrum
IONIX Attack Surface Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ionix
Island Enterprise Browser logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/island-browser
Jamf Pro context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-pro-context
JAMF Security Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jamf-security-cloud
Jenkins logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jenkins
JFrog Artifactory logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jfrog-artifactory
JumpCloud Directory Insights logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/jumpcloud-directory-insights
Juniper Junos logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/juniper-junos
Juniper NetScreen Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/juniper-firewall
Kaseya Datto File Protection logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/datto-file-protection
Kaspersky AV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kaspersky-av
Kea DHCP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kea-dhcp
Keeper Enterprise Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/keeper
Kemp Load Balancer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kemp-loadbalancer
Keycloak logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/keycloak
Kiteworks (formally Accellion) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/accellion
Kong Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kong-gateway
Kyriba Treasury Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kyriba
Lacework Cloud Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/lacework
LenelS2 OnGuard logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/lenel-onguard
LimaCharlie EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/limacharlie-edr
LinkShadow NDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/linkshadow-ndr
Linux auditd and AIX systems logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/auditd
LogonBox logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/logonbox
Lookout Mobile Endpoint Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/lookout-mobile-endpoint-security
Lucid audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/lucid
ManageEngine AD360 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/manage-engine-ad360
ManageEngine ADAudit Plus logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/adaudit-plus
ManageEngine ADManager Plus logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/admanager-plus
ManageEngine Exchange Reporter Plus logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/manage-engine-reporter-plus
ManageEngine Log360 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/manage-engine-log360
Mandiant Threat Intelligence Custom IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mandiant-custom-ioc
McAfee DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-dlp
McAfee Firewall Enterprise logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-esm
McAfee Web Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-webproxy
Menlo Security Isolation Platform (MSIP) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/menlo-security
Metabase logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/metabase
Micro Focus NetIQ Access Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netiq-access-manager
Microsoft Azure Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-activity
Microsoft Azure AD logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-ad
Microsoft Azure AD Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-ad-audit
Microsoft Azure AD Context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-ad-context
Microsoft Azure DevOps audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-devops
Microsoft Azure Key Vault logging logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-keyvault-audit
Microsoft Azure Resource logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-resource-logs
Microsoft Defender for Cloud Alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-defender-cloud-alerts
Microsoft Defender for Endpoint logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-defender-atp
Microsoft Defender for Endpoint on iOS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-defender-endpoint-ios
Microsoft Defender for Identity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-defender-identity
Microsoft Defender for Office 365 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-defender-mail
Microsoft Dynamics 365 User Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-dynamics-365
Microsoft Exchange logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/exchange-mail
Microsoft Graph Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-graph-activity-logs
Microsoft IAS / Network Policy Server (NPS) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-ias
Microsoft IIS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/iis
Microsoft Intune logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-mdm-intune
Microsoft Intune Context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/azure-mdm-intune-context
Microsoft LAPS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-laps
Microsoft Network Policy Server (NPS) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-nps
Microsoft Sentinel logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-sentinel
Microsoft SharePoint (Office 365) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sharepoint
Microsoft SQL Server logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-sql
Microsoft System Center Endpoint Protection (SCEP) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microsoft-scep
Microsoft Windows Defender ATP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-defender-atp
MicroStrategy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/microstrategy
Mimecast Mail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mimecast-mail
Mimecast Mail V2 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mimecast-mail-v2
MISP IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/misp-ioc
MobileIron logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mobileiron
MongoDB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mongo-db
MuleSoft Anypoint logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mulesoft-anypoint
MYSQL logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mysql
Nagios XI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nagios
Nasuni File Services Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nasuni-file-services
Neo4j Aura logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/neo4j
NetApp Console (formerly BlueXP) audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netapp-bluexp
NetApp ONTAP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netapp-ontap
NetApp SAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netapp-san
NetDocuments logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netdocuments
Netscaler logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/citrix-netscaler
Netscout Arbor Sightline logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/arbor-sightline
Netscout OCI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netscout-oci
Netskope alert logs v1https://cloud.google.com/chronicle/docs/ingestion/default-parsers/netskope-alert
Netskope alert logs v2https://cloud.google.com/chronicle/docs/ingestion/default-parsers/netskope-alert-v2
Netskope Client logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netskope-client
Netskope web proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netskope-webproxy
Netwrix Auditor logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netwrix
Netwrix Privilege Secure for Discovery logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/remediant-secureone
NGINX logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nginx
Nokia Router logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nokia-router
Nokia VitalQIP DDI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vitalqip
ntopng logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ntopng
Nucleus Asset Metadata logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nucleus-asset
Nucleus Security - Nucleus Unified Vulnerability Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nucleus-vulnerability
Nutanix Prism logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nutanix-prism
Nyansa Voyance / VMware Edge Network Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/nyansa-events
OAuth2 Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/kubernetes-auth-proxy
Office 365 Message Trace logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/office-365-messagetrace
Okera Dynamic Access Platform (ODAP) audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/okera-dap
Okta Advanced Server Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/okta-scaleft
Okta logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/okta
Okta User Context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/okta-user-context
Onapsis Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/onapsis
One Identity Identity Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/one-identity-identity-manager
One Identity TPAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oneidentity-tpam
OneLogin Single Sign-On (SSO) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/onelogin-sso
1Password logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/onepassword
1Password audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/onepassword-audit-events
Onfido logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/onfido
OpenAI Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/openai-auditlog
OpenCanary logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/opencanary
OpenLDAP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/openldap
OpenTelemetry Netflow Receiver logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/netflow-otel
OPNsense firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/opnsense
Oracle Cloud Infrastructure - Oracle Cloud Guard logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oci-cloudguard
Oracle Cloud Infrastructure Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oci-audit
Oracle Cloud Infrastructure logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oracle-cloud-audit
Oracle DB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oracle-db
Oracle Fusion Cloud Applications logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oracle-fusion
Oracle NetSuite logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oracle-netsuite
Oracle NetSuite - NetSuite Applications Suite logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/net-suite
Oracle Unified Directory logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/oracle-oud
Ordr IoT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ordr-iot
Palo Alto Cortex XDR alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cortex-xdr
Palo Alto Cortex XDR events logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-cortex-xdr-events
Palo Alto Networks IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-ioc
Palo Alto Networks Traps logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-edr
Palo Alto Prisma Access CASB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-casb
Palo Alto Prisma Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-prisma-cloud
Palo Alto Prisma Cloud alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pan-prisma-ca
Palo Alto Prisma SD-WAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloudgenix-sdwan
Passive DNS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/passive-dns
PingOne Advanced Identity Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/forgerock-identity-cloud
pfSense logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pfsense
Pharos logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pharos
PhishLabs logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/phishlabs
PowerShell logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/powershell
Precisely Ironstream for IBM z/OS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ironstream-zos
Preempt logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/preempt
Preempt Auth logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/preempt-auth
Privacy-i logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/privacy-i
Progress MOVEit Transfer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ipswitch-moveit-transfer
Proofpoint Email Filter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-mail-filter
Proofpoint Emerging Threats Pro IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/et-pro-ioc
Proofpoint On-Demand logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-on-demand
Proofpoint Secure Email Relay logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-ser
Proofpoint Sendmail Sentrion logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-sendmail-sentrion
Proofpoint TAP alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-mail
Proofpoint TAP Forensics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-tap-forensics
Proofpoint TAP Threats loghttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-tap-threats
Proofpoint Threat Response (TRAP) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-trap
Proofpoint Web Browser Isolation logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-web-browser-isolation
PTC Windchill logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windchill
Pulse Secure logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pulse-secure-vpn
Pure Storage logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/pure-storage
Qualys asset context logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-asset-context
Qualys Continuous Monitoring logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-continuous-monitoring
Qualys Scan logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-scan
Qualys Virtual Scanner logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-virtual-scanner
Qualys Vulnerability Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-vm
Quest Change Auditor for EMC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/quest-change-auditor-emc
Quest File Access Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/quest-file-audit
Radware Alteon logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/radware-alteon
Radware WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/radware-firewall
Rapid7 InsightIDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rapid7-insight
Rapid7 Nexpose logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rapid7-nexpose
reCAPTCHA Enterprise logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/gcp-recaptcha-enterprise
Recorded Future IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/recorded-future-ioc
Recordia logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/recordia
Red Canary EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/redcanary-edr
Red Hat Directory Server LDAP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/redhat-directory-server
ReviveSec logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/revivesec
RH-ISAC IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rh-isac-ioc
Ribbon Analytics Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ribbon-analytics-platform
Rippling activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rippling-activitylogs
Riverbed SteelHead logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/steelhead
RSA Authentication Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rsa-auth-manager
RSA SecurID Access logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rsa-securid
Rubrik Security Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/rubrik-security-cloud
SailPoint IAM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sailpoint-iam
SailPoint IdentityIQ logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sailpoint-iiq
Saiwall VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/saiwall-vpn
Salesforce logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/salesforce
Salesforce Commerce Cloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/salesforce-commerce-cloud
SAP Change Document logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-change-document
Sangfor Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sangfor-proxy
SAP BTP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-btp
SAP HANA Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-hana-audit
SAP ICM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-icm
SAP Cloud Identity Services logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-identity-and-auth-data
SAP NetWeaver logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-netweaver
SAP Security Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-security-audit
SAP SM20 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-sm20
SAP SuccessFactors logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-successfactors
SAP Sybase ASE logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-ase
SAP Web Dispatcher logs"https://cloud.google.com/chronicle/docs/ingestion/default-parsers/sap-webdisp
Saviynt Enterprise Identity Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/saviynt-eip
SecureAuth Identity Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/secureauth-sso
SecureLink logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/securelink
Secure Web Proxy logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/cloud-swp
Semperis DSP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/semperis-dsp
SentinelOne Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentinelone-activity
SentinelOne Deep Visibility logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentinel-dv
SentinelOne EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentinel-edr
Sentry logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sentry
ServiceNow audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/servicenow-audit
ServiceNow CMDB datahttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/servicenow-cmdb
Signal Sciences WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/signal-sciences-waf
Skyhigh Secure Web Gateway (On-Premises) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-web-protection
Skyhigh Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-skyhigh-casb
Slack audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/slack-audit
Smartsheet logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/smartsheet
Snipe-IT logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/snipe-it
Snort logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/snort-ids
Snowflake logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/snowflake
Snyk group-level audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/snyk-sdlc
Snyk group-level audit and issues logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/snyk-issues
SonicWall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sonic-firewall
Sonrai Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sonrai
Sophos AV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-av
Sophos Capsule8 logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-capsule8
Sophos Central logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-central
Sophos DHCP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-dhcp
Sophos Intercept EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-edr
Sophos UTM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-utm
Sophos XG Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sophos-firewall
SOTI MobiControl logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/soti-mobicontrol
Splunk Attack Analyzer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/splunk-attack-analyzer
SpyCloud logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/spycloud
Static IP asset context datahttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/asset-static-ip
Stealthbits Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/stealthbits-audit
Stealthbits StealthDEFEND logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/stealthbits-defend
STIX Threat Intelligence logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/stix
Suricata Eve logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/suricata-eve
Swift Alliance Messaging Hub logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/swift-amh
Swimlane Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/swimlane
Symantec CloudSOC CASB logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-casb
Symantec DLP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-dlp
Symantec EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-edr
Symantec Endpoint Protection logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sep
Symantec Event Export logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-event-export
Symantec Messaging Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-mail
Symantec Security Analytics logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-sa
Symantec VIP Authentication Hub logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-vip-authhub
Symantec VIP Enterprise Gateway logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-vip
Symantec Web Isolation logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-web-isolation
Symantec WSS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/symantec-wss
Synology logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/synology
Sysdig logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/sysdig
Tableau logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tableau
Tailscale logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tailscale
Talon logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/talon
Tanium Asset logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-asset
Tanium audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-audit
Tanium Comply logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-comply
Tanium Discover logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-discover
Tanium Insight logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-insight
Tanium Integrity Monitor logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-integrity-monitor
Tanium Patch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-patch
Tanium Question logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-question
Tanium Reveal logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-reveal
Tanium Stream logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-th
Tanium Threat Response logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tanium-threat-response
TCPWave DDI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tcpwave-ddi
Teleport Access Plane logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/teleport-access-plane
Tenable Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tenable-audit
Tenable CSPM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tenable-cspm
Tenable Vulnerability Management logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tenable-io
Teradata Database logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/teradata-db
Terraform Enterprise logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/terraform-enterprise
Tetragon eBPF audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tetragon-ebpf-audit-logs
Thinkst Canary logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/thinkst-canary
ThreatConnect IOC logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatconnect-ioc
ThreatConnect IOC logs using the v3 APIhttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatconnect-ioc-v3
Team Cymru Scout Threat Intelligence datahttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/team-cymru-scout-threatintel
TeamViewer logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/teamviewer
ThreatDown EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/malwarebytes-edr
ThreatLocker logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatlocker
ThreatX WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatx-waf
Tines audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tines
Tintri audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tintri
Trellix Endpoint Security (HX) alert logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trellix-hx-alerts
Trellix Endpoint Security (HX) audit event logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trellix-hx-audit
Trellix Endpoint Security (HX) host inventory logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trellix-hx-hosts
Trellix ePO logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trellix-epo
Trellix IPS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trellix-ips
Trend Micro Apex One logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-apex-one
Trend Micro Apex Central logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-apex-central
Trend Micro Cloud One logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-cloudone
Trend Micro DDI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-ddi
Trend Micro Deep Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-deep-security
Trend Micro Email Security logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-email-security
Trend Micro Vision One logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one
Trend Micro Vision One Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-activity
Trend Micro Vision One Audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-audit
Trend Micro Vision One Container Vulnerability logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-container-vulnerability
Trend Micro Vision Detections logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-detections
Trend Micro Vision One Observed Attack Techniques logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-observed-attack-techniques
Trend Micro Vision One Workbench logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-vision-one-workbench
Tripwire logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/tripwire-fim
Twingate VPN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/twingate
uberAgent logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/uberagent
Ubika WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ubika-waf
Ubiquiti Unifi switch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ubiquiti-switch
UKG logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/ukg
Uptycs EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/uptycs-edr
UPX AntiDDoS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/upx-antiddos
URLScan IO logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/urlscan-io
VanDyke VShell SFTP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vandyke-sftp
Varonis logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/varonis
Vectra Alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vectra-alerts
Vectra Detect logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vectra-detect
Vectra Stream logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vectra-stream
Vectra XDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vectra-xdr
Veeam logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/veeam
Venafi Zero Touch PKI logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/venafi-ztpki
Verba Recording System logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/verba-rec
Vercel WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vercel-waf
Veridium ID logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/veridium-id
Veritas NetBackup logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/veritas-netbackup
Versa Networks Secure Access Service Edge (SASE) logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/versa-firewall
Virtru Email Encryption logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/virtru-email-encryption
VMware Airwatch logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/airwatch
VMware Avi Load Balancer WAF logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-avilb-waf
VMware ESXi logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-esx
VMware Horizon logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-horizon
VMware Networking and Security Virtualization (NSX) Manager logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-nsx
VMware Tanzu logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-tanzu
VMware vCenter logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-vcenter
VMware VeloCloud SD-WAN logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-velocloud-sdwan
VMware vRealize logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-vrealize
VMware vSphere logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-vsphere
VMware Workspace ONE UEM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-workspace-one
Voltage SecureMail logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/voltage
VSFTPD logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vsftpd
VyOS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/vyos
Wallix Bastion logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/wallix-bastion
WatchGuard EDR logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/watchguard-edr
WatchGuard Fireware logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/watchguard
Wazuh logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/wazuh
Windows AppLocker logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-applocker
Windows Defender Antivirus logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-defender-av
Windows Event logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/winevtlog-xml
Windows Firewall logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-firewall
Windows Hyper-V logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-hyperv
Windows Network Policy Server logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/windows-net-policy-server
WinSCP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/winscp
Wiz logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/wiz-io
Wordpress CMS logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/wordpress-cms
Workday audit logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/workday-audit
Workday HCM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/workday
Workday User Activity logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/workday-user-activity
WP Engine logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/wpengine
XAMS by Xiting logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/xiting-xams
Yamaha router logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/yamaha-router
Yubico OTP logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/yubico-otp
Zeek TSV logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/bro-tsv
Zendesk CRM logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zendesk-crm
Zero Networks logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zero-networks
Zerofox Platform logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zerofox-platform
Zix Email Encryption logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zix-email-encryption
Zoom operation logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zoom-operation-logs
Zscaler NSS Feeds for Alerts logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-nss-feeds
ZyXEL ZyWALL logshttps://cloud.google.com/chronicle/docs/ingestion/default-parsers/zywall
Manage data processing pipelineshttps://cloud.google.com/chronicle/docs/ingestion/data-processing-pipeline
Optimize ingestion volumehttps://cloud.google.com/chronicle/docs/ingestion/optimize-ingestion
Manage prebuilt parsershttps://cloud.google.com/chronicle/docs/event-processing/manage-parser-updates
Re-parse historical data (Log Replay)https://cloud.google.com/chronicle/docs/event-processing/reparse-historical-data
Develop parser extensionshttps://cloud.google.com/chronicle/docs/event-processing/using-parser-extensions
Parser extension exampleshttps://cloud.google.com/chronicle/docs/event-processing/parser-extension-examples
Create parser extensions with Geminihttps://cloud.google.com/chronicle/docs/event-processing/parsers-using-ai
Configure custom parsershttps://cloud.google.com/chronicle/docs/event-processing/configure-custom-parsers
Troubleshoot parser codehttps://cloud.google.com/chronicle/docs/event-processing/parser-tips-troubleshooting
Manage self-service parser optionshttps://cloud.google.com/chronicle/docs/event-processing/self-service-parser-options
Map parser data to key UDM fieldshttps://cloud.google.com/chronicle/docs/reference/important-udm-fields
Auto-extraction overviewhttps://cloud.google.com/chronicle/docs/event-processing/auto-extraction
Implement community parsers in GitHubhttps://cloud.google.com/chronicle/docs/ingestion/parsers-github
Bypass log validation for parser extensions and custom parsershttps://cloud.google.com/chronicle/docs/event-processing/bypass-log-validations
Configure aliasinghttps://cloud.google.com/chronicle/docs/event-processing/aliasing-overview
Configure enrichmenthttps://cloud.google.com/chronicle/docs/event-processing/data-enrichment
Manage enrichment blockshttps://cloud.google.com/chronicle/docs/event-processing/block-enrichment-flows
Entity Context Graph overviewhttps://cloud.google.com/chronicle/docs/event-processing/entity-graph
Ontology overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/ontology-overview
Map and model entitieshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/create-entities-mapping--modeling
Visual families overviewhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/visual-families
Configure mapping and assign visual familieshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/configure-mapping-and-assign-visual-families
Configure entity delimitershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/working-with-entity-delimiters
Check data ingestion healthhttps://cloud.google.com/chronicle/docs/ingestion/ingestion-overview
Ingestion metrics overviewhttps://cloud.google.com/chronicle/docs/ingestion/understand-ingestion-metrics2
Analyze ingestion with Cloud Monitoringhttps://cloud.google.com/chronicle/docs/ingestion/ingestion-notifications-for-health-metrics
Configure silent-host monitoringhttps://cloud.google.com/chronicle/docs/ingestion/silent-host-monitoring
Troubleshoot common Linux forwarder issueshttps://cloud.google.com/chronicle/docs/install/troubleshoot-forwarder
View SOAR connector logshttps://cloud.google.com/chronicle/docs/soar/ingest/connectors/view-connector-logs
View billed ingestion volumehttps://cloud.google.com/chronicle/docs/ingestion/view-billed-ingestion-volume
Analyze feed activity with Cloud Logginghttps://cloud.google.com/chronicle/docs/ingestion/analyze-feed-activity-with-cloud-logging
Troubleshoot ingestion issueshttps://cloud.google.com/chronicle/docs/ingestion/troubleshooting-ingestion
Understand quotas and burst limitshttps://cloud.google.com/chronicle/docs/ingestion/burst-limits
Detection rules overviewhttps://cloud.google.com/chronicle/docs/detection/default-rules
Composite detections overviewhttps://cloud.google.com/chronicle/docs/detection/composite-detections
Context-enriched data in ruleshttps://cloud.google.com/chronicle/docs/detection/use-enriched-data-in-rules
Apply YARA-L rule best practiceshttps://cloud.google.com/chronicle/docs/detection/yara-l-best-practices
Review potential security issueshttps://cloud.google.com/chronicle/docs/review-security-alert
Single and multiple event rules in YARA-Lhttps://cloud.google.com/chronicle/docs/yara-l/yara-l-2-0-examples
Threat Hunt agent overviewhttps://cloud.google.com/chronicle/docs/detection/threat-hunt-agent
Generate rules with Geminihttps://cloud.google.com/chronicle/docs/detection/generate-yara-l-with-gemini
Create context-aware analyticshttps://cloud.google.com/chronicle/docs/detection/context-aware-analytics
Incorporate Sensitive Data Protection datahttps://cloud.google.com/chronicle/docs/detection/usecase-dlp-high-risk-user-download
Integrate BYOL Threat Intelligencehttps://cloud.google.com/chronicle/docs/detection/gti-byol
Integrate your own threat intelligence feedshttps://cloud.google.com/chronicle/docs/detection/integrate-threat-intel-feeds
Applied Threat Intelligence fusion feedhttps://cloud.google.com/chronicle/docs/detection/ati-fusion-feed
Identify unusual behavior and entity riskhttps://cloud.google.com/chronicle/docs/detection/ueba-getting-started
Manage entity watchlistshttps://cloud.google.com/chronicle/docs/detection/watchlist-getting-started
Risk Analytics overviewhttps://cloud.google.com/chronicle/docs/detection/risk-analytics-overview
Analyze risks using the dashboardhttps://cloud.google.com/chronicle/docs/detection/risk-analytics-dashboard
Watchlists FAQhttps://cloud.google.com/chronicle/docs/detection/watchlist-faq
Risk Analytics FAQhttps://cloud.google.com/chronicle/docs/detection/risk-analytics-faq
Apply curated detectionshttps://cloud.google.com/chronicle/docs/detection/use-curated-detections
Manage curated detectionshttps://cloud.google.com/chronicle/docs/detection/curated-detections
Applied Threat Intelligence curated detectionshttps://cloud.google.com/chronicle/docs/detection/ati-curated-detections
Chrome Enterprise threatshttps://cloud.google.com/chronicle/docs/detection/chrome-enterprise-threats-category
Cloud threatshttps://cloud.google.com/chronicle/docs/detection/cloud-threats-category
Composite ruleshttps://cloud.google.com/chronicle/docs/detection/composite-rules-category
Linux threatshttps://cloud.google.com/chronicle/docs/detection/linux-threats-category
MacOS threatshttps://cloud.google.com/chronicle/docs/detection/macos-threats-category
Mandiant Hunting ruleshttps://cloud.google.com/chronicle/docs/detection/mandiant-hunt-category
Non-prioritized IoC Matching threatshttps://cloud.google.com/chronicle/docs/detection/non-prioritized-ioc-matching-threats-category
Risk Analytics for UEBAhttps://cloud.google.com/chronicle/docs/detection/risk-analytics-ueba-category
Windows threatshttps://cloud.google.com/chronicle/docs/detection/windows-threats-category
Manage third-party vendor alertshttps://cloud.google.com/chronicle/docs/detection/third-party-vendor-alerts-category
Understand the rules dashboardhttps://cloud.google.com/chronicle/docs/detection/view-all-rules
Detect threats with unified ruleshttps://cloud.google.com/chronicle/docs/detection/unified-rules/get-started
Manage unified ruleshttps://cloud.google.com/chronicle/docs/detection/unified-rules/manage-unified-rules
Search the rules listhttps://cloud.google.com/chronicle/docs/detection/unified-rules/search-rules-list
Manage unified rules with Rules APIhttps://cloud.google.com/chronicle/docs/detection/unified-rules/unified-rules-api
Edit rules in the Rules editorhttps://cloud.google.com/chronicle/docs/detection/manage-all-rules
Monitor rule performancehttps://cloud.google.com/chronicle/docs/detection/rule-effectiveness
View rule versionshttps://cloud.google.com/chronicle/docs/detection/view-rule-versions
Archive ruleshttps://cloud.google.com/chronicle/docs/detection/archive-a-rule
Monitor threat coverage (MITRE)https://cloud.google.com/chronicle/docs/detection/mitre-dashboard
Use event simulationhttps://cloud.google.com/chronicle/docs/secops/event-simulation
Apply a rule to live datahttps://cloud.google.com/chronicle/docs/detection/run-rule-live-data
Understand rule run schedulinghttps://cloud.google.com/chronicle/docs/detection/rule-execution-frequency
Configure customized schedules for ruleshttps://cloud.google.com/chronicle/docs/detection/set-customized-schedule
Understand rule replays and MTTDhttps://cloud.google.com/chronicle/docs/detection/rule-replays
Understand rule detection delayshttps://cloud.google.com/chronicle/docs/detection/detection-delays
Run a rule against historical datahttps://cloud.google.com/chronicle/docs/detection/run-rule-historical-data
Optimize rule performancehttps://cloud.google.com/chronicle/docs/detection/optimize-detection-and-reporting-performance
Enable risk-based alertinghttps://cloud.google.com/chronicle/docs/detection/risk-based-alerting
Download eventshttps://cloud.google.com/chronicle/docs/detection/downloading-events
Configure alert suppressionhttps://cloud.google.com/chronicle/docs/investigation/alert-suppression
Close alerts in bulkhttps://cloud.google.com/chronicle/docs/administration/bulk-close-alerts
Manage rule exclusionshttps://cloud.google.com/chronicle/docs/investigation/rule-exclusion-api
Filter DataTap events with ruleshttps://cloud.google.com/chronicle/docs/reference/use-rules-in-datatap
Verify data ingestion with test ruleshttps://cloud.google.com/chronicle/docs/detection/verify-data-ingestion
Case management overviewhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/cases-overview2
Understand searchhttps://cloud.google.com/chronicle/docs/investigation/udm-search
UDM overviewhttps://cloud.google.com/chronicle/docs/event-processing/udm-overview2
Understand data availability for searchhttps://cloud.google.com/chronicle/docs/investigation/expected-data-availability-for-search
Search best practiceshttps://cloud.google.com/chronicle/docs/investigation/udm-search-best-practices
Procedural filtering overviewhttps://cloud.google.com/chronicle/docs/investigation/filtering-overview
Create a case manuallyhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/create-a-manual-case
Triage alerts with the Triage Agenthttps://cloud.google.com/chronicle/docs/secops/triage-investigation-agent
Monitor alerts on the Triage Agent dashboardhttps://cloud.google.com/chronicle/docs/secops/triage-investigation-agent-dashboards
Investigate alerts with the 3P Context Agenthttps://cloud.google.com/chronicle/docs/investigation/context-agent-investigation
Manage cases from the case queuehttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-case-queue-header
Investigate alertshttps://cloud.google.com/chronicle/docs/investigation/investigate-alert
Manage alerts and IoC matcheshttps://cloud.google.com/chronicle/docs/investigation/alerts-iocs
Investigate GCTI alertshttps://cloud.google.com/chronicle/docs/investigation/investigate-uppercase-alert
Manage large alertshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/handle-large-alerts
Change alert priorityhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/changing-alert-priority-instead-of-case-priority
Relocate cases between environmentshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/move-case-to-a-new-environment
Investigation and case management overviewhttps://cloud.google.com/chronicle/docs/secops/investigate/investigation-management/investigation-management-overview
Use the Events Viewerhttps://cloud.google.com/chronicle/docs/secops/investigate/investigation-management/use-events-viewer
Attach SIEM search results to caseshttps://cloud.google.com/chronicle/docs/secops/investigate/investigation-management/create-case-from-search
Investigate cases with Geminihttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/investigate-cases-alerts-gemini
Summarize cases with Geminihttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/using-the-gemini-case-summary-widget
Collaborate using case chathttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/instant-messaging-on-a-case
Explore the cases pagehttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-cases-screen
Explore the case overview tabhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-case-overview-tab
Review alert highlights and contexthttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/whats-on-the-alert-overview-tab
Investigate entities and alertshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/explore-entities-and-alerts-investigation
View SIEM data in a casehttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/view-the-original-siem-data-in-a-case
Navigate the Entity Explorer pagehttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/navigating-the-entity-explorer-screen
Manage entity propertieshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/add-or-edit-entity-properties
Filter case and alert datahttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/apply-and-save-filters
Perform entity selectionhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/entity-selection
Manage caseshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/what-actions-can-you-take-on-a-case
Analyze event detailshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/alert-events-tab
Review alertshttps://cloud.google.com/chronicle/docs/review-alert
Manage search detailshttps://cloud.google.com/chronicle/docs/investigation/udm-search-time-range
Use context-enriched data in searchhttps://cloud.google.com/chronicle/docs/investigation/use-enriched-data-in-search
Search raw logshttps://cloud.google.com/chronicle/docs/investigation/search-raw-logs
Filter data in raw log searchhttps://cloud.google.com/chronicle/docs/investigation/filter-data-raw-log-scan-view
Conduct entity context searcheshttps://cloud.google.com/chronicle/docs/investigation/entity-context-in-search
Investigate assetshttps://cloud.google.com/chronicle/docs/investigation/investigate-asset
Investigate usershttps://cloud.google.com/chronicle/docs/investigation/investigate-user
Investigate domainshttps://cloud.google.com/chronicle/docs/investigation/investigate-domain
Investigate an IP addresshttps://cloud.google.com/chronicle/docs/investigation/investigate-ipaddress
Investigate a filehttps://cloud.google.com/chronicle/docs/investigation/investigate-file
Investigate an entity using UDM searchhttps://cloud.google.com/chronicle/docs/investigation/udm-search-investigate-entity
View VirusTotal informationhttps://cloud.google.com/chronicle/docs/investigation/view-virustotal-information
Manage asset namespaceshttps://cloud.google.com/chronicle/docs/investigation/asset-namespaces
Investigative views overviewhttps://cloud.google.com/chronicle/docs/investigation/investigation-views
Filter data in User viewhttps://cloud.google.com/chronicle/docs/investigation/filter-data-user-view
Filter data in Asset viewhttps://cloud.google.com/chronicle/docs/investigation/filter-data-asset-view
Filter data in Domain viewhttps://cloud.google.com/chronicle/docs/investigation/filter-data-domain-view
Filter data in IP Address viewhttps://cloud.google.com/chronicle/docs/investigation/filter-data-ipaddress-view
Filter data in Hash viewhttps://cloud.google.com/chronicle/docs/investigation/filter-data-hash-view
Investigate detections in searchhttps://cloud.google.com/chronicle/docs/investigation/investigate-detections-in-search
Search cases overviewhttps://cloud.google.com/chronicle/docs/investigation/search-and-search-case-history
Federated search across instanceshttps://cloud.google.com/chronicle/docs/secops/mssp-multi-tenant-operations
Use conditions in search and dashboardshttps://cloud.google.com/chronicle/docs/investigation/yara-l-2-0-conditions
Deduplicate search resultshttps://cloud.google.com/chronicle/docs/investigation/deduplication-yaral
Analyze search data with statisticshttps://cloud.google.com/chronicle/docs/investigation/statistics-aggregations-in-udm-search
UDM search compared with Rule resultshttps://cloud.google.com/chronicle/docs/investigation/udm-search-vs-rules-results
Apply joins in search and dashboardshttps://cloud.google.com/chronicle/docs/investigation/search-joins
Implement joins without a match sectionhttps://cloud.google.com/chronicle/docs/investigation/joins-without-match-section
Correlate data using outer joinshttps://cloud.google.com/chronicle/docs/investigation/outer-joins
Create multi-stage querieshttps://cloud.google.com/chronicle/docs/investigation/multi-stage-yaral
Search data tableshttps://cloud.google.com/chronicle/docs/investigation/data-tables
Answer Threat Intelligence questions with Geminihttps://cloud.google.com/chronicle/docs/detection/answer-threat-intelligence-questions-gemini
Generate search queries with Geminihttps://cloud.google.com/chronicle/docs/investigation/generate-udm-search-queries-gemini
Evaluate threat coverage with the Detection Engineering Agenthttps://cloud.google.com/chronicle/docs/secops/agentic-detection-engineering
Threat Intelligence overviewhttps://cloud.google.com/chronicle/docs/detection
Applied Threat Intelligence overviewhttps://cloud.google.com/chronicle/docs/detection/applied-threat-intel-overview2
Applied Threat Intelligence prioritization overviewhttps://cloud.google.com/chronicle/docs/detection/ati-prioritization
Integrate your own threat intelligence feedshttps://cloud.google.com/chronicle/docs/detection/integrate-threat-intel-feeds
View IoCshttps://cloud.google.com/chronicle/docs/detection/ati-view-ioc-page
GTI score overviewhttps://cloud.google.com/chronicle/docs/detection/understand-ic-score
Emerging Threats Center overviewhttps://cloud.google.com/chronicle/docs/detection/emerging-threats
Emerging Threats Center detail viewhttps://cloud.google.com/chronicle/docs/detection/emerging-threats-detailed-view
Track case taskshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/manage-tasks-from-the-cases-screen
Your workdesk overviewhttps://cloud.google.com/chronicle/docs/soar/overview-and-introduction/your-workdesk/workdesk
Submit requests from your workdeskhttps://cloud.google.com/chronicle/docs/soar/overview-and-introduction/your-workdesk/filling-out-request-from-workdesk
Respond to pending actions from your workdeskhttps://cloud.google.com/chronicle/docs/soar/overview-and-introduction/your-workdesk/respond-to-pending-actions-from-workdesk
Monitor cases from your workdeskhttps://cloud.google.com/chronicle/docs/soar/overview-and-introduction/your-workdesk/viewing-your-cases-from-your-workdesk
Search cases and entitieshttps://cloud.google.com/chronicle/docs/soar/investigate/search/working-with-search-screen
Resolve and close caseshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/how-to-close-cases
Monitor case response and closure metricshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/measure-how-long-security-analysts-take-to-close-or-raise-a-case
Validate case workflows with test caseshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/create-a-test-case
Playbook automation overviewhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/whats-on-the-playbooks-screen2
Use the playbook navigatorhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-playbook-navigator
Create your first playbookhttps://cloud.google.com/chronicle/docs/soar/respond/start-developing/my-first-automation
Case playbooks overviewhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/case-playbooks
Manage playbooks with Geminihttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/create-edit-playbook-with-gemini
Manage playbook triggershttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-triggers-in-playbooks
Use reaction triggers in playbookshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-reaction-triggers-in-playbooks
Trigger playbooks by alert typehttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-alert-type-trigger-in-a-playbook
Manage playbook actionshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-actions-in-playbooks
Manage playbook flowshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-flows-in-playbooks
Work with playbook blockshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/working-with-playbook-blocks
Automate tasks with playbook loopshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/playbook-loops
Attach playbooks to alerts and caseshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/attach-playbooks-to-alerts-cases
Configure custom alert viewshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/define-customized-alert-views-from-playbook-designer
Configure the HTML widgethttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-the-html-widget
Configure predefined widgets in playbook viewshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-predefined-widgets-in-playbook-views
Build logic with the Expression Builderhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-the-expression-builder
Specify an instance in dynamic modehttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/specify-instance-in-dynamic-mode
Configure timeouts for async actionshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/how-do-i-configure-timeouts-for-playbook-async-actions
Configure parallel actionshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-parallel-actions
Embed AI agents in playbookshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/agentic-automation2
Configure automatic retrieshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/retry-actions
Assign actions and playbook blockshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/assign-actions-and-playbook-blocks
Assign approval links in actionshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/assign-approval-links-in-actions
Manage playbook permissionshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/playbook-permissions
Review and manage alert playbook executionhttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/whats-on-the-alert-playbook-tab
Rerun automated playbookshttps://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/rerun-playbooks
Manage bulk actions and filters in playbookshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/bulk-actions-and-filters-in-playbooks
Monitor playbook performancehttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/understanding-playbook-monitoring
Test playbooks with the simulatorhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/working-with-playbook-simulator
Explore playbook use caseshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/playbooks-use-cases
Expression Builder exampleshttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/use-cases-for-expression-builder
Create a fallback playbookhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/create-a-catch-all-triage-playbook
Create an enrichment playbook blockhttps://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/create-reusable-enrichment-block
Monitor health of data sourceshttps://cloud.google.com/chronicle/docs/reports/data-health-monitoring-and-troubleshooting-dashboard
Monitor response and playbook healthhttps://cloud.google.com/chronicle/docs/reports/response-health-monitoring-and-troubleshooting-dashboard
Monitor ingestion healthhttps://cloud.google.com/chronicle/docs/reports/dashboards-overview#ingest
Troubleshoot ingestion issueshttps://cloud.google.com/chronicle/docs/ingestion/troubleshooting-ingestion2
Troubleshoot detection ruleshttps://cloud.google.com/chronicle/docs/detection/troubleshoot-rule-errors
Troubleshoot remote agentshttps://cloud.google.com/chronicle/docs/soar/working-with-remote-agents/troubleshooting2
Troubleshoot SOAR functionalityhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/copy-instance-metadata
View connector logshttps://cloud.google.com/chronicle/docs/soar/ingest/connectors/view-connector-logs2
Collect SOAR platform logshttps://cloud.google.com/chronicle/docs/secops/collect-secops-soar-logs
Dashboards overviewhttps://cloud.google.com/chronicle/docs/reports/native-dashboards2
Manage and configure dashboardshttps://cloud.google.com/chronicle/docs/reports/manage-native-dashboards
Manage charts in dashboardshttps://cloud.google.com/chronicle/docs/reports/manage-native-dashboard-charts
Dashboard data sources and field prefixeshttps://cloud.google.com/chronicle/docs/reports/dashboard-data-sources-prefixes
Visualize data flows with Sankey chartshttps://cloud.google.com/chronicle/docs/reports/manage-native-dashboard-charts-sankey
Configure dashboard filtershttps://cloud.google.com/chronicle/docs/reports/native-dashboards-filters
Configure scheduled reportshttps://cloud.google.com/chronicle/docs/reports/scheduled-email-reports
Curated queries overviewhttps://cloud.google.com/chronicle/docs/reports/native-curated-dashboards
Common curated dashboardshttps://cloud.google.com/chronicle/docs/reports/native-curated-dashboards-overview
Query entitieshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-entities
Query ingestion metricshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-ingestion-metrics
View IOC matcheshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-ioc-matches
Query rules and detectionshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-rules-detections
Query SOAR caseshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-cases
Query SOAR case historyhttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-case-history
Query SOAR playbookshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-soar-playbooks
Run UDM querieshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-udm-
View UDM and datatable querieshttps://cloud.google.com/chronicle/docs/reports/curated-dashboards/dashboard-queries-udm-datatable
Legacy SIEM dashboard overviewhttps://cloud.google.com/chronicle/docs/reports/dashboards-overview
Create a custom dashboardhttps://cloud.google.com/chronicle/docs/reports/create-custom-dashboard
Create a visualizationhttps://cloud.google.com/chronicle/docs/reports/create-chart-visualization
Share a personal dashboardhttps://cloud.google.com/chronicle/docs/reports/share-personal-dashboard
Schedule dashboard reportshttps://cloud.google.com/chronicle/docs/reports/schedule-reports
Analyze reports with context-enriched datahttps://cloud.google.com/chronicle/docs/reports/use-enriched-data-in-reports
Import and export dashboardshttps://cloud.google.com/chronicle/docs/reports/import-export-dashboards
Legacy SOAR dashboards overviewhttps://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-dashboards/dashboard-overview
Add SOAR dashboard widgetshttps://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-dashboards/add-dashboard-widgets
Explore the SOAR dashboards pagehttps://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-dashboards/whats-on-the-dashboard-screen
Explore legacy SOAR reportshttps://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-reports/understanding-reports
Work with SOAR reportshttps://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-reports/using-looker-explores-in-soar-reports
Export to a self-managed BigQuery projecthttps://cloud.google.com/chronicle/docs/reports/export-to-customer-managed-project
Stream data with Advanced BigQuery exporthttps://cloud.google.com/chronicle/docs/reports/bigquery-export
BigQuery data schema overviewhttps://cloud.google.com/chronicle/docs/reports/understand-bigquery-data-schema
Export to a Google-managed BigQuery projecthttps://cloud.google.com/chronicle/docs/reports/overview-chronicle-bigquery
Export raw logs to a self-managed Google Cloud Storage buckethttps://cloud.google.com/chronicle/docs/reports/export-rawLogs-to-self-managed-gcs-bucket
SIEM standalone table of contentshttps://cloud.google.com/chronicle/docs/secops/google-secops-siem-toc
SIEM platform overviewhttps://cloud.google.com/chronicle/docs/overview
SOAR standalone table of contentshttps://cloud.google.com/chronicle/docs/secops/google-secops-soar-toc
Authenticate usershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/external-authentication
Configure Google Workspace for SAMLhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/saml-configuration-for-g-suite
Configure Microsoft Azure for SAMLhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/saml-configuration-for-azure
Configure Okta for SAMLhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/saml-configuration-for-okta
Configure multiple SAML providershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/configure-multiple-saml-providers
Troubleshoot SAML issueshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/saml-issues-troubleshooting
Manage SOAR standalone usershttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/how-do-i-add-a-new-user-to-the-platform
Invite users to the platformhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/email-invitation-prerequisites
Manage password policyhttps://cloud.google.com/chronicle/docs/soar/admin-tasks/user-soar-only/what-is-soar-password-policy
Configure just-in-time user provisioninghttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/what-is-justintime-user-provisioning
Map IdP groups for SOAR standalone accesshttps://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/idp-group-mapping-soar-only
Configure case federation for SOAR standalonehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/case-federation
Use the Content Hub for SOAR standalonehttps://cloud.google.com/chronicle/docs/soar/marketplace/using-the-marketplace
Deprovision a SOAR standalone instancehttps://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/clean-up-after-removing-instance
Get Started with Google Cloud https://cloud.google.com/docs/get-started
Product List https://cloud.google.com/docs/product-list
Cloud Customer Care https://cloud.google.com/support/docs
Agent Platform https://cloud.google.com/products/gemini-enterprise-agent-platform
Apigee API Management https://cloud.google.com/apigee
BigQuery https://cloud.google.com/bigquery
Compute Engine https://cloud.google.com/products/compute
Cloud CDN https://cloud.google.com/cdn
Cloud Run https://cloud.google.com/run
Cloud Storage https://cloud.google.com/storage
Cloud SQL https://cloud.google.com/sql
Gemini Enterprise https://cloud.google.com/gemini/enterprise/docs
Google Kubernetes Engine https://cloud.google.com/kubernetes-engine
Looker https://cloud.google.com/looker
Access and resources management https://cloud.google.com/docs/access-resources
Costs and usage management https://cloud.google.com/docs/costs-usage
Infrastructure as code https://cloud.google.com/docs/iac
SDK, languages, frameworks, and tools https://cloud.google.com/docs/devtools
AI and ML https://cloud.google.com/docs/ai-ml
Application development https://cloud.google.com/docs/application-development
Application hosting https://cloud.google.com/docs/application-hosting
Compute https://cloud.google.com/docs/compute-area
Data analytics and pipelines https://cloud.google.com/docs/data
Databases https://cloud.google.com/docs/databases
Distributed, hybrid, and multicloud https://cloud.google.com/docs/dhm-cloud
Industry solutions https://cloud.google.com/docs/industry
Migration https://cloud.google.com/docs/migration
Networking https://cloud.google.com/docs/networking
Observability and monitoring https://cloud.google.com/docs/observability
Security https://cloud.google.com/docs/security
Storage https://cloud.google.com/docs/storage
Home https://docs.cloud.google.com/
Documentation https://docs.cloud.google.com/docs
Security https://docs.cloud.google.com/docs/security
Google Security Operations https://docs.cloud.google.com/chronicle/docs
Guides https://docs.cloud.google.com/chronicle/docs/secops/secops-overview
SIEM https://cloud.google.com/chronicle/docs/secops/google-secops-siem-toc
Google Cloud consolehttps://console.cloud.google.com/
Bindplane agent installation guidehttps://cloud.google.com/chronicle/docs/ingestion/use-bindplane-agent#install_the_bindplane_agent
Regional Endpointshttps://cloud.google.com/chronicle/docs/reference/rest?rep_location=us#regional-service-endpoint
regional endpointhttps://cloud.google.com/chronicle/docs/reference/ingestion-api#regional-endpoints
View the Change Log for this parserhttps://docs.cloud.google.com/chronicle/docs/ingestion/parser-list/secureauth-sso-changelog
Get answers from Community members and Google SecOps professionals.https://security.googlecloudcommunity.com/
Creative Commons Attribution 4.0 Licensehttps://creativecommons.org/licenses/by/4.0/
Apache 2.0 Licensehttps://www.apache.org/licenses/LICENSE-2.0
Google Developers Site Policieshttps://developers.google.com/site-policies
See all products https://cloud.google.com/products/
Google Cloud pricing https://cloud.google.com/pricing/
Google Cloud Marketplace https://cloud.google.com/marketplace/
Contact sales https://cloud.google.com/contact/
Community forums https://discuss.google.dev/c/google-cloud/14/
Support https://cloud.google.com/support-hub/
Release Notes https://docs.cloud.google.com/release-notes
System status https://status.cloud.google.com
GitHub https://github.com/googlecloudPlatform/
Getting Started with Google Cloud https://cloud.google.com/docs/get-started/
Code samples https://cloud.google.com/docs/samples
Cloud Architecture Center https://cloud.google.com/architecture/
Training and Certification https://cloud.google.com/learn/training/
Builders Hub https://me.developers.google.com/
Blog https://cloud.google.com/blog/
Events https://cloud.google.com/events/
X (Twitter) https://x.com/googlecloud
Google Cloud on YouTube https://www.youtube.com/googlecloud
Google Cloud Tech on YouTube https://www.youtube.com/googlecloudplatform
https://developers.google.com/
Android https://developer.android.com/
Chrome https://developer.chrome.com/
Firebase https://firebase.google.com/
Google AI https://ai.google.com/
About Google https://about.google/
Privacy https://policies.google.com/privacy
Site terms https://policies.google.com/terms?hl=en
Google Cloud terms https://cloud.google.com/product-terms
Manage cookies https://cloud.google.com/chronicle/docs/ingestion/default-parsers/secureauth-sso
Our third decade of climate action: join us https://cloud.google.com/sustainability
Subscribe https://cloud.google.com/newsletter/

Viewport: width=device-width, initial-scale=1


URLs of crawlers that visited me.