The macOS Security portal and Jamf Security Cloud can integrate with security information and event management (SIEM) solutions and other third-party storage solutions.
- Data Streams from the Jamf Security Cloud portal
The data streams integration feature supports data integrations with the Jamf Security Cloud portal. For more information, see Data Streams for Jamf Security Cloud.
- Action Configurations and Data Forwarding from the macOS Security portal
If using a security information and event management (SIEM) solution to store security information with Jamf Protect, you must create or determine an appropriate endpoint to use for communication between the Jamf Protect agent and your SIEM.
Work with your IT administrator to determine or create a SIEM endpoint. The SIEM should support JSON formatted events sent from the endpoint via HTTPS. For more information, see macOS Security Data Integrations by Vendor.