Data exports and third-party integrations
The following sections provide more information about data exports and third-party integrations.
Security Information and Event Management integration
The integration of Citrix SecurAccess™ ZTNA with Security Information and Event Management (SIEM) enables administrators to export critical logs, policy outcomes, and user activity data to third-party SIEM systems using Kafka push mechanisms. This integration provides enhanced visibility, compliance tracking, and security insights for organizations using Citrix SecurAccess ZTNA services.
You can use any SIEM, such as Splunk, Google Chronicle, Microsoft Sentinel, or Elastic.
For the list of user events associated with Citrix SecurAccess ZTNA and Device Posture service in your SIEM, see the following topics:
Build custom report with OData APIs
The Citrix SecurAccess ZTNA Monitor OData REST APIs enables administrators to export session data and build custom reports. This feature is useful for tracking rollouts, analyzing user activity, and gaining insights into the performance and usage of Citrix SecurAccess ZTNA services.
For information on the types of Citrix SecurAccess ZTNA data available for export, see the following topics:
-
Citrix SecurAccess ZTNA sessions
-
Citrix SecurAccess ZTNA applications
-
Citrix SecurAccess ZTNA enumerations
Export system logs
The Systems Log feature in Citrix Cloud provides a timestamped record of events that occur within the Citrix SecurAccess ZTNA service. Administrators can export these logs as a CSV file for further analysis and verification. For details, see Syslog from Citrix Cloud.