Available Integrations
This page lists the integrations that the Integrations catalog ships with Energy Logserver 8.1. The table comes from the integration manifests, the same files the catalog reads, so it shows what you see under Tools → Integrations on a fresh installation. Integrations you build with the AI Assistant do not appear here.
Every integration installs a Network Probe pipeline. The other columns show what else it deploys:
Column |
Meaning |
|---|---|
Categories |
The catalog categories the integration belongs to. |
Dashboards |
The integration imports Discover dashboards. |
Alert rules |
The number of alert rules the integration imports. |
Extra steps |
Additional wizard steps: Agents (collector downloads) or Index Management (index policies). See Advanced Installation. |
Requires SIEM Plan |
The catalog shows the integration only when the license includes SIEM Plan. |
Guide |
A dedicated page with host-side setup or manual configuration. |
Integration |
Categories |
Dashboards |
Alert rules |
Extra steps |
Requires SIEM Plan |
Guide |
|---|---|---|---|---|---|---|
Avamar |
Backup, Recovery, Storage |
Yes |
0 |
No |
No |
- |
AWS |
Cloud, Infrastructure, Storage |
Yes |
33 |
No |
No |
- |
Barracuda Networks |
Firewall, Mail, Network |
Yes |
11 |
No |
No |
- |
Beats |
Beats, Agents, Monitoring |
Yes |
82 |
Agents |
No |
- |
Cisco ASA |
Firewall, Security, Network |
Yes |
11 |
No |
No |
- |
Cisco Firepower Threat Defense |
Firewall, Security, Network |
No |
0 |
No |
No |
- |
CMDB |
Management |
Yes |
0 |
No |
No |
|
Energy Monitor |
Monitoring, Infrastructure |
No |
0 |
No |
No |
- |
FortiGate |
Firewall, Security, Protection |
Yes |
17 |
No |
No |
- |
Labyrinth |
Network, Security |
Yes |
7 |
No |
Yes |
- |
Master Agent |
Management, Agents |
No |
0 |
Agents |
No |
|
MikroTik |
Network, Firewall |
No |
0 |
No |
No |
- |
NetFlow |
Monitoring, Network |
Yes |
15 |
No |
No |
- |
Network Stream |
Monitoring, Network |
No |
0 |
No |
No |
- |
OP5 Monitor |
Monitoring, Infrastructure |
No |
0 |
No |
No |
- |
Oracle |
Database, Storage |
Yes |
18 |
No |
No |
- |
Paloalto |
Firewall, Security, Protection |
Yes |
8 |
No |
No |
- |
QualysGuard |
Security, Monitoring |
Yes |
0 |
No |
Yes |
|
Ruckus |
Network, Infrastructure |
Yes |
0 |
No |
No |
- |
Stormshield |
Firewall, Security |
Yes |
2 |
No |
Yes |
- |
Suricata |
Network, Security |
Yes |
5 |
Index Management |
Yes |
|
Syslog |
Monitoring, Security |
Yes |
0 |
No |
No |
- |
Syslog CEF |
Monitoring, Security |
Yes |
0 |
No |
No |
- |
Syslog Mail |
Monitoring, Mail |
Yes |
0 |
No |
No |
- |
Tenable Security Center |
Security |
Yes |
4 |
No |
Yes |
|
Uberagent |
Monitoring |
No |
0 |
No |
No |
- |
UEBA |
Security, Monitoring |
Yes |
0 |
No |
No |
|
Vectra AI |
Security |
Yes |
5 |
No |
Yes |
- |
VMware |
Virtualization, Infrastructure, Cloud |
Yes |
0 |
No |
No |
- |
Watchguard |
Firewall, Security, Network |
Yes |
11 |
No |
Yes |
- |
Waystream |
Network |
Yes |
6 |
No |
No |
- |
Wazuh |
Network, Security |
No |
0 |
Agents |
Yes |
- |
WinRM |
Management, Automation |
No |
0 |
No |
No |
- |
Zeek |
Monitoring, Network |
No |
0 |
No |
Yes |
Vendors Covered by Alert Rules Only
The pre-built alert rule groups described in Alerting System include products that have no catalog entry. A rule only fires when an index matching its index pattern receives events with the fields the rule reads. The table lists, for each such group, the index pattern its rules read and the catalog integrations whose pipelines write a matching index in Energy Logserver 8.1. None means that no shipped pipeline writes that index: before the rules can fire, you need your own Network Probe pipeline that writes the events to a matching index with the fields the rules expect. The table compares index names only.
Rule group |
Rules |
Index pattern |
Shipped pipeline writing a matching index |
Rule list |
|---|---|---|---|---|
Checkpoint |
25 |
|
Syslog CEF |
|
Cisco ESA |
8 |
|
Syslog, Syslog Mail |
|
Cisco VPN |
5 |
|
Syslog, Syslog Mail |
|
Exchange |
6 |
|
None |
|
F5 |
3 |
|
None |
|
FireEye |
16 |
|
Syslog CEF |
|
Forcepoint |
6 |
|
None |
|
Fudo |
5 |
|
None |
|
Infoblox |
14 |
|
Syslog CEF |
|
Juniper |
5 |
|
None |
|
McAfee |
6 |
|
None |
|
Microsoft MsSQL |
6 |
|
None |
|
Microsoft Windows DHCP |
11 |
|
None |
|
Microsoft Windows DNS |
12 |
|
None |
|
MySQL |
10 |
|
None |
|
Postfix |
6 |
|
Syslog, Syslog Mail |
|
PostgreSQL |
11 |
|
None |
|
Squid |
7 |
|
Syslog for the |
Syslog CEF routes Check Point, FireEye and Infoblox events to their indices only when the devices send them in CEF format. For the remaining groups, including Cluster-Health, Correlated, Empowered AI and Ransomware, see Available Groups.