Monitor events with SIEM event delivery (legacy customers only)

__MAGIC_BLOCK_0__

Configure and manage the Security Information and Event Management (SIEM) service. SIEM provides a way for you to collect and analyze security events that occur on your site or in your app.

SIEM event management

• Activate or deactivate SIEM event feeds
  Enabling and disabling SIEM events. Also: what happens to your existing data if you decide to deactivate SIEM.?

• Configure Amazon S3 buckets
  Connecting to your Amazon S3 bucket .

• Download SIEM event data
  Retrieving SIEM event data from your Amazon S3 bucket.

• Manage SIEM event public keys
  Adding public keys to, and removing public keys from, your Amazon S3 bucket.

• Block SIEM events
  Specify the Identity Cloud event types (e.g., email_verification) that you don’t want notifications sent to you. (In other words, “I don’t need to be notified each time a user verifies their email address.”)

• Import SIEM events into Splunk
  How to get your Identity Cloud SIEM event data into Splunk.

Related articles

• SIEM event delivery technical reference