--- title: Acronis SIEM Connector description: The Acronis SIEM Connector 2.0 is integrated directly into protection plans, it uses the Acronis agent as the data writer - eliminating complex syslog server setup - and exports alerts, events, activities and tasks in either CEF or JSON format to a designated file path for ingestion by any SIEM platform. canonical_url: https://www.acronis.com/en/integrations/acronis-siem-connector/ locale: en last_updated: 2026-10-11 --- Featured # Acronis SIEM Connector * * * Company:Acronis Integration:Acronis SIEM Connector Category:SOAR & SIEM [Try now](https://www.acronis.com/en-us/support/documentation/CyberProtectionService/index.html#siem-plans.html) [Have a question or need help?](https://www.acronis.com/en/contact-us/integrations/) ## Acronis SIEM Connector **The new Acronis SIEM Connector 2.0 implemented as a SIEM LogForwarding plan** SIEM (Security Information and Event Management) platforms are cybersecurity solutions that provide centralized log management, offer real-time threat detection, facilitate incident investigations, and help managed service providers meet compliance requirements. The **new Acronis SIEM Connector 2.0** offers easier configuration, broader data coverage and improved compliance. Integrated directly into protection plans, it uses the Acronis agent as the data writer - eliminating complex syslog server setup - and exports alerts, events, activities and tasks in either CEF or JSON format to a designated file path for ingestion by any SIEM platform. This simplifies data consolidation. By launching this integration, Acronis maintains its active membership in MISA – reinforcing our shared commitment to delivering secure, Microsoft-aligned solutions for MSPs. ### Explore resources * [Documentation](https://www.acronis.com/en-us/support/documentation/CyberProtectionService/index.html#siem-plans.html) ## Start Ingesting Acronis Data in Minutes The SIEM LogForwarding plan (SIEM Connector 2.0) eliminates the time-consuming setup of syslog servers and certificate generation by leveraging the Acronis agent. It allows MSPs to begin collecting Acronis logs, ready for ingestion by any SIEM, in just **four simple steps**. 1. Create an Acronis SIEM LogForwarding plan 2. Choose a writer device on the company network (Windows or Linux) and file path where to store the Acronis data. You can also pick a syslog server (no need to generate certificates) 3. Pick file format (we recommend CEF) 4. Choose what Acronis data to collect (Alerts, Events, Tasks, Audit Log) ![Image 2: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/47467718-6916-3e08-a63e-df28203417df.png) ![Image 3: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/45891c64-3e38-2d1c-5fe0-ee2dd559c680.png) ![Image 4: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/82946d7b-1002-a9fc-8bab-0851e9595c53.png) ![Image 5: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/01f8784b-19f7-ef13-65b5-3f4afa657a84.png) ![Image 6: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/d24871f8-5011-596e-d615-376e4302716f.png) ![Image 7: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/9e39742b-203f-fd95-84d0-c786908e0426.png) ![Image 8: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/f1f07c4b-4bb8-5681-3769-25511f0ac83e.png) ![Image 9: Start Ingesting Acronis Data in Minutes](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/acronis_marketplace/eb91c5fe-0579-a3ea-8f40-f1ac2f8f7670.png) ## Features ### Simple Activation Utilizing the Acronis Agent The SIEM LogForwarding plan (SIEM Connector 2.0.) eliminates the time-consuming and complex process of manually configuring syslog servers and generating security certificates. Instead of spending hours on infrastructure setup, MSPs simply select a destination device, either an existing machine on the customer's network (Windows or Linux) or a designated syslog server, and the Acronis agent automatically writes Acronis logs to a specified path on that device without requiring additional certificate generation, firewall rule adjustments, or gateway server setup. ### Expanded Security Data Coverage The connector now forwards a comprehensive suite of security telemetry including event logs, custom alerts, EDR data, DLP data, URL filtering logs, and activity records—providing MSPs with richer security intelligence than the previous alerts-and-audit-logs-only approach. This expanded data scope enables MSPs to deliver more complete security visibility to their customers. ### Tenant-Isolated Secure Connections Each customer tenant now has an independent, dedicated connection to their preferred SIEM platform, ensuring complete data isolation and eliminating compliance risks associated with shared data destinations across multiple tenants. This architectural change addresses critical compliance requirements by guaranteeing that security events and logs from one customer remain completely separate from those of other customers, even within the same MSP account. ### HIPAA Compliant Log Storage and Retention The SIEM Connector enables MSPs to maintain HIPAA compliance by allowing logs to be stored directly on any device on the customer network with an Acronis agent. The MSP can use this device as a server and store logs for the required minimum of six years. This capability eliminates the need for separate archival solutions and simplifies compliance audits, as all historical security events and logs remain readily accessible in a single location. ### Acronis * [Company website](https://www.acronis.com/en/products/cloud/cyber-protect/) ### Acronis Support * [Support website](https://www.acronis.com/en/support/) ## Other integrations by Acronis ![Image 10: Acronis MDR by Acronis TRU](https://eu8-cloud.acronis.com/api/platform-web-assets/public/s3/a_mdr/4f75dd1c-416b-0df9-14eb-e3dab615792d.png) ### [Acronis MDR by Acronis TRU](https://www.acronis.com/en/integrations/acronis-mdr-by-acronis-tru/) Acronis Managed Detection and Response (MDR) by Acronis TRU labs delivers 24/7 expert threat monitoring, detection, and rapid response. Powered by AI and Acronis’ cyber protection platform, it helps organizations stop advanced attacks, reduce IT workload, and stay resilient against evolving cyber threats. ## Discover the Acronis Technology Ecosystem Explore how Acronis partners with top technologies to deliver secure, integrated, and automated solutions. Stay informed and unlock new opportunities through our growing ecosystem. ### New Case Study Nord Security business suite accelerates product adoption by 350% through the Acronis Technology Ecosystem [Read now](https://www.acronis.com/en/resource-center/resource/nord-security-business-suite-accelerates-product-adoption-by-350-percent/) ### Build an Integration Learn how to build with Acronis Technology Partner Program [Submit integration](https://developer.acronis.com/en-us/) ### Request an Integration Tell us your suggestion for our next integration [Submit suggestion](https://www.acronis.com/en/contact-us/integrations/) ### Ecosystem Webinar Learn more about the Rewst and Acronis Integration [Watch now](https://acronis.events/event/streamline-and-secure-your-msp-business-the-financial-benefits-of-automated-cybersecurity) ### Ecosystem Events Five takeaways from MSP Global 2025 [Read now](https://www.acronis.com/en/blog/posts/five-takeaways-from-msp-global-2025-for-msps-building-their-stack-with-acronis-integrations/) ### Ecosystem News Acronis Ecosystem Reaches 300 Technology Integrations [Read latest news](https://www.acronis.com/en-us/pr/2025/acronis-ecosystem-reaches-300-technology-integrations-drives-new-opportunities-for-msps-and-isvs/)