ShieldGate Docs

Observability

SIEM export

Stream security and audit signals to external SIEM systems.

Goal

Export events to a SIEM over HTTP JSON (sample plugin) or your own logging plugin.

Steps

  1. Deploy a SIEM plugin assembly (sample: ShieldGate.Plugins.Siem.HttpJson).
  2. Open Advanced → SIEM channels.
  3. Configure endpoint, headers, and filters.
  4. Generate a security event (Detect-mode block lab) and confirm delivery.

Verify

  • SIEM receives JSON payloads with tenant and event metadata.
  • Failures are visible in logs without dropping edge traffic.