Using Forcepoint storage

To get the formatted SIEM data to your network when Forcepoint storage has been selected as the Storage type on the SIEM Storage page, you can either use the sample Perl script included in the zip file linked at the top of the SIEM integration page, or create a script of your own. The account used to run this script is the one created in Create a new administrator contact for Forcepoint storage.

See Running the SIEM log file download script for Forcepoint Storage in Help for details on formatting the data and downloading and using the script.