Integrate Coralogix SIEM with Zoho Vault Password Manager

Integrating Zoho Vault with Coralogix

  1. Log in to your Coralogix console and navigate to the Settings section in the top-right corner.
  2. In the Settings menu, locate the Users and Teams section and click Keys.
  3. Hover over the Send-Your-Data API Keys option and click the SEND YOUR DATA KEY button.
  4. Give a Key name and Choose SendData in the Role Presets and create the API key.

Configuring Coralogix details in Vault 

  1. Log in to your Zoho Vault account as a super admin.
  2. In the Settings menu, select SIEM Integration, then click Edit Configurations under Coralogix.
  3. Enter the Collector Hostname and Port details provided by Coralogix, then click Save Configuration.
  4. Select the list of audit trails to be sent to your SIEM service from Zoho Vault under Manage Syslog Configuration.

Accessing Zoho Vault logs from Coralogix

To view all Zoho Vault audit logs in Coralogix:
  1. Log in to your Coralogix account.
  2. Search using the application name 'Zoho Vault' or the subsystem name 'Zoho Vault Logs' to locate the relevant log entries.