Protector Plus forwards two event classes to your SIEM:Documentation Index
Fetch the complete documentation index at: https://docs.protectorplus.cloudsine.tech/llms.txt
Use this file to discover all available pages before exploring further.
- Dashboard login activity — authentication events for the management console.
- Security events — per-request guardrail decisions (Detected and Blocked).
Supported transport
- SYSLOG over UDP — natively supported in the appliance form factor.
- Standard log-forwarding patterns — available in the Kubernetes form factor for broader log-shipping (TCP, TLS, structured forwarding).
Configure SYSLOG forwarding
SIEM-forwarding configuration is restricted to Super Admin users.
Event volume
Per-request guardrail decisions are emitted at request granularity. Tune the SIEM collector’s ingestion limits accordingly — under a 1.5-second-per-message latency profile, ag6e.2xlarge instance can sustain meaningful traffic volume; size your collector to match.
