You have a SIEM that needs to analyze log files from Web Security Service (WSS).

Web Security Service

 There is a REST API that can be used to integrate your SIEM with WSS.

  1. Create the API Key on WSS (Web Security Service: Near Real-Time Log Sync Brief)

  2. Once the API Key is generated, WSS provides the API method for the SIEM to download logs from WSS. The SIEM tools need to pull those logs via HTTPS and with the configured API Key.

  3. You need to involve your SIEM administrator to help you to consume the logs downloaded via SyncAPI. Symantec's technical support only provides the API Key and interface to download the logs.

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation