💝 Official Elastic Integration?

[Greg.Connors]

Hi, we should be able to do what NPS is doing in the link you pasted.

JSON SIEM Template for Privilege Secure

Customers that would like the SIEM data sent in JSON format can use the following format as a default. This format has been tested against a variety of SIEM solutions. Create a new SIEM Template named “JSON” Fill in the Description field with the appropriate information - i.e. “Custom JSON output” Type \” for the ‘Characters to Escape’ to ensure that the output renders correctly in Rapid7 and Splunk Type \ as the ‘Escape Character’ Copy and paste the following text in to the ‘Format’ field. {…

This may even be possible today if you post in your format into the “custom template” section.

We will look into this on our side.