+4Hi everyone,
We plan to integrate Veeam Backup and Replication with our SIEM as part of our security hardening. I would like guidance on the best way to forward Veeam logs and events to a SIEM platform.
Looking for advice on supported methods, required settings, and any best practices or limitations.
+11ou can use syslog
[Veeam B&R Server] -->(TLS Syslog) --> [Syslog Relay / Collector] -->SIEM (Splunk / Sentinel)├── Long-term storage
└── SOAR platform
+14Which SIEM solution are you looking to use?
There is a database of qualified solutions that have been tested in the Veeam Ready program: https://www.veeam.com/solutions/alliance-partner/integrations-qualifications.html?type%5B%5D=security-information-event-management-&endOfSupport%5B%5D=true
+21We send our stuff to syslog and then our security does the rest pulling in to SIEM.
+21Hi
Yes….review the User Guide on how to add your SIEM to VBR:
https://helpcenter.veeam.com/docs/vbr/userguide/syslog_servers_hiw.html?ver=13
There are several solutions you can use. Make sure yours is one that’s supported by review Rasmus’s link
Best.
+3this is on my list of things with Veeam! i have nothing integrated at the moment
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.