You can subscribe to Cloud NSS, enabling direct cloud-to-cloud log streaming for all ZIA log types into a compatible cloud-based security information and event management (SIEM) system without any on-premises connectors. Instead of deploying, managing, and monitoring NSS VMs, you can configure an HTTPS API feed to push logs from the Zscaler cloud into an HTTPS API-based log collector on your SIEM. To learn more, see Understanding Nanolog Streaming Service (NSS).

The following guides detail the requirements and steps to integrate Cloud NSS with your SIEM:

• Zscaler and Amazon S3 Deployment Guide
• Zscaler and Arctic Wolf Deployment Guide
• Zscaler and Cribl Deployment Guide
• Zscaler and CrowdStrike Deployment Guide
• Zscaler and Datadog Deployment Guide
• Zscaler and Devo Deployment Guide
• Zscaler and Elastic Deployment Guide
• Zscaler and Elevate Security Deployment Guide
• Zscaler and Exabeam Deployment Guide
• Zscaler and Google SecOps Deployment Guide
• Zscaler and Gurucul Deployment Guide
• Zscaler and Hunters Deployment Guide
• Zscaler and IBM QRadar Deployment Guide
• Zscaler and KnowBe4 Deployment Guide
• Zscaler and Living Security Deployment Guide
• Zscaler and LogRhythm Deployment Guide
• Zscaler and Microsoft Sentinel Deployment Guide
• Zscaler and Panther Deployment Guide
• Zscaler and Saasyan Deployment Guide
• Zscaler and Securonix Deployment Guide
• Zscaler and Sekoia Deployment Guide
• Zscaler and SentinelOne Deployment Guide
• Zscaler and Splunk Deployment Guide
• Zscaler and Sumo Logic Deployment Guide

For a list of SIEMs that integrate with the VM-based NSS, see Integrating VM-Based NSS with SIEMs.