This post will help you verify that your cloud connector is attached to a valid SIEM in the SkyFormation application.
Each cloud connector when added to the SkyFormation app is attached to a specific tenant.
To allow the cloud connector's collected events to be send to a SIEM the cloud connector's tenant must be as well attached to a valid SIEM (SIEM defined in the SkyFormation app).
cloud connector/s --- (attached to) --> Tenant ---(attached to) --> SIEM
Please follow the steps below to verify that a specific cloud connector is attached to a tenant that is attached to an integrated SIEM.
Step 1: Log into your SkyFormation app
Step 2: Go to the SkyFormation Settings -> ACCOUNTS page
Step 3: Look in the table for the cloud connector
Step 4: At the cloud connector raw see the connector's "TENANT" value.
This is the tenant the connector is attached to.
Now we will look for the SIEM attached to the cloud connector's tenant.
Step 5: Go to the SkyFormation Settings -> TENANTS page
Step 6: Look for the tenant found at section 4 above
Step 7: Focus on the tenant raw and press "EDIT" to see its configuration
The SIEM value reflects the SIEM attached to the tenant.