Overview
By integrating Bitdefender GravityZone with Blumira, you can send security logs to Blumira’s cloud-based platform for up to a year of long-term data retention, which is ideal for compliance and cyber insurance use cases. Blumira centralizes GravityZone logs and other logs from different data sources to provide a holistic view of the overall security of your environment.
Before you begin
This integration requires a Blumira sensor to be installed before you can complete the steps below. Ensure that you complete the steps in Building a Blumira sensor with Ubuntu before you continue.
Gather the IP address of your Blumira sensor to use when configuring the external service.
To find and copy the IP address of the sensor, do the following:
- In Blumira, navigate to Ingestion > Sensors.
- Click the sensor row to open the details page.
- In the Overview section, next to Host Details, copy the IP address.
Configuring Bitdefender GravityZone to send logs to Blumira
After gathering the IP address of your Blumira sensor, complete the procedures in Bitdefender's Generic integrations for SIEM platforms without HTTPS listeners, transporting via TLS to port 6514.
Important clarifications for the integration
This diagram helps to illustrate the architecture of this log integration:
Below are important notes about the procedure to integrate with GravityZone:
| Step | Details |
|---|---|
| Installing the connector |
The authentication key You must create this key; it is a customer-supplied value and should be cryptographically strong. Never use example values like |
| Testing the collector |
In the cURL test command in Test the connector, if you are testing from the same system that is running your collector, use Example: |
| Configuring GravityZone push settings |
|