How to send Proofpoint logs to SumoLogic?

Follow

Mike Miller

• January 23, 2019 19:51

Currently our organization has an implementation of Proofpoint in the cloud (no on-prem physical box). How can we send Proofpoint logs to SumoLogic?

0

• 

  Piotr Woch

  • January 23, 2019 20:41

  Hi Mike!

  One way I can suggest is to use a bash script to retrieve the data via Proofpoint API, save to a file and use an installed Sumo collector to send the files off to Sumo, or modify the script to forward the data to a hosted Sumo collector.

  For starters, here's a link to an example shell script that invokes Proofpoint API:

  https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation/SIEM_API#Sample_Unix_Shell_Script

  I hope this helps!

   

  0

  Comment actions Permalink
• 

  Ryan Lovergine

  • February 02, 2020 18:05
  • Edited

  We're new Sumo Logic customers (and ProofPoint customers) and we would also like to see a better solution fro Sumo Logic on how to consume the ProofPoint POD (not SIEM API) logs into Sumo Logic. 

  0

  Comment actions Permalink

Please sign in to leave a comment.