Prepare destination and retrieve required credentials. This step varies slightly depending on your SIEM system.
Configure the audit log streaming destination in the portal.
Verify the connection. Use the connection test in the TF Platform UI to generate a log and send it to your SIEM system. Alternatively, take any action in the platform that produces an audit log, such as attempting to log in to TF Platform.
View the audit log on your external SIEM system to confirm that streaming is properly configured.