Overview
By integrating Bitdefender GravityZone with Blumira, you can send security logs to Blumira’s cloud-based platform for up to a year of long-term data retention, which is ideal for compliance and cyber insurance use cases. Blumira’s SIEM + XDR platform centralizes Bitdefender logs and other logs from different data sources to provide a holistic view of the overall security of your environment.
Before you begin
This integration requires a Blumira sensor to be installed before you can complete the steps below. Ensure that you complete the steps in Building a Blumira sensor with Ubuntu before you continue.
Gather the IP address of your Blumira sensor to use when configuring the external service.
To find and copy the IP address of the sensor, do the following:
- In Blumira, navigate to Settings > Sensors.
- Click the sensor row to open the details page.
- In the Overview section, next to Host Details, copy the IP address.
Configuring Bitdefender GravityZone to send logs to Blumira
After gathering the IP address of your Blumira sensor, complete the procedures in Generic integrations for SIEM platforms without HTTPS listeners and transport via TLS to port 6514.
Note: We recommend TLS because other transport methods are less secure since they would require exposing non-TLS system logs on the firewall.