Kaseya SIEM Integrations Guide
The Kaseya SIEM documentation organizes integrations by the role each data source plays in visibility and correlation, not by vendor or ownership grouping as shown in the product UI. This guide follows that same logic, with one addition: PSA tools are broken out into their own section since they are documented separately from this core section (see “PSA” below).
Endpoint and infrastructure data sources
Host-level telemetry generated by endpoints, servers, and endpoint security platforms, including RMM tools (which report on managed devices) and agent-delivered detection modules.
NOTE Endpoint Security and RMM are shown as separate tables below for easier scanning. In the underlying Kaseya SIEM documentation, both are part of a single Endpoint and Infrastructure category. This split is a presentational choice for this guide, not a distinction the product docs draw.
Endpoint security
| Name | Help Docs |
|---|---|
| Bitdefender GravityZone | |
| CrowdStrike | Integration: Kaseya SIEM and CrowdStrike |
| Cylance Monitor | Integration: Kaseya SIEM and Cylance Monitor |
| Datto EDR | Integration: Kaseya SIEM and Datto EDR |
| Deep Instinct | Integration: Kaseya SIEM and Deep Instinct |
| SentinelOne | Integration: Kaseya SIEM and SentinelOne |
| Sophos | Integration: Kaseya SIEM and Sophos |
| Webroot Monitor | Integration: Kaseya SIEM and Webroot Monitor |
RMM
| Name | Help Docs |
|---|---|
| Datto RMM | Integration: Kaseya SIEM and Datto RMM |
|
N-Able N-Central RMM |
|
|
NinjaOne RMM |
|
| Syncro RMM | Integration: Kaseya SIEM and Syncro RMM |
|
VSA 9 |
Network and log-based sources
Log-based infrastructure and security systems that send telemetry using supported formats such as syslog.
Firewall telemetry is ingested through Firewall Log Analyzer rather than through separate per-vendor integrations. The following firewall platforms are supported:
| Barracuda Firewall |
| Checkpoint Firewall |
| Cisco Firepower |
| Cisco RV Series Router |
| Cisco IOS Device |
|
Cisco Meraki |
| Fortinet Firewall |
| Juniper Firewall |
| Mikrotik |
| Palo Alto Firewall |
| pfSense Firewall |
| SonicWall |
| Sophos |
| Ubiquiti Unifi Security Gateway (USG) |
| Untangle Firewall |
| WatchGuard Firewall |
| Zyxel Firewall |
NOTE Vendor-specific firewall configuration procedures are not documented in Kaseya SIEM. Configure syslog forwarding on the firewall according to the vendor's documentation.
For configuration details, see the following article:
| Name | Help Docs |
|---|---|
| Firewall Log Analyzer | Configuring Firewall Log Analyzer (Firewall log ingestion) |
DNS
| Name | Help Docs |
|---|---|
| DNSFilter | Integration: Kaseya SIEM and DNSFilter |
SaaS and cloud sources
Application-level telemetry from customer-owned SaaS and cloud services, including identity providers, productivity platforms, collaboration tools, business applications, and cloud infrastructure logs.
Identity and access management
| Name | Help Docs |
|---|---|
|
Amazon CloudTrail |
|
| Duo | Integration: Kaseya SIEM and Duo |
|
Okta |
Email security
| Name | Help Docs |
|---|---|
| Graphus | Integration: Kaseya SIEM and Graphus |
| INKY | Integration: Kaseya SIEM and INKY |
Productivity and collaboration
| Name | Help Docs |
|---|---|
|
Dropbox |
|
|
Google Workspace |
|
|
Microsoft 365 |
|
| Salesforce | Integration: Kaseya SIEM and Salesforce |
| Slack | Integration: Kaseya SIEM and Slack |
|
Zoom |
Documentation
| Name | Help Docs |
|---|---|
|
Hudu |
|
| IT Glue | Integration: Kaseya SIEM and IT Glue |
Dark Web Monitoring
| Name | Help Docs |
|---|---|
| Dark Web ID | Integration: Kaseya SIEM and Dark Web ID |
| Have I Been Pwned (Pwnd Monitor) | Integration: Kaseya SIEM and Have I Been Pwned |
PSA
PSA (Professional Services Automation) tools provide operational and ticketing context rather than primary security telemetry. These integrations are documented in the Administration and configuration section, separately from the core Integrations and data sources section, but are included here for completeness.
| Name | Help Docs |
|---|---|
| Kaseya BMS | Integration: Kaseya SIEM and Kaseya BMS |
| Autotask PSA | Integration: Kaseya SIEM and Autotask PSA |
|
ConnectWise |
|
| Halo PSA | Integration: Kaseya SIEM and Halo PSA |
| Syncro | Integration: Kaseya SIEM and Syncro PSA |
Don't see the integration you need?
For documentation requests, content corrections, enhancement suggestions, or questions about existing integration documentation, contact kb.request@kaseya.com.
