There are various methods to integrate SIEM products with Trellix IPS and access its information. For example, you can use SNMP traps, syslog, or scripts. The methods that you can use depend on the information that you want to access; not all information is available through all methods. The following is a matrix of the information that you can access from the Manager and the corresponding methods that you can use.
Method
Data 
|
SNMP | Syslog | Scripts | SQL query | Report |
|---|---|---|---|---|---|
| Alert data | Yes | Yes | Yes | Yes | Yes |
| Packet Log data | No | No | No | Yes | No |
| System fault | Yes | Yes | Yes | Yes | Yes |
| ACL | No | Yes | No | No | No |
| Audit | No | Yes | No | Yes | Yes |