Skip to main content
bevo1985
Rising Star
December 15, 2025
Question

Export PS syslog to Rapid7 IDR

  • December 15, 2025
  • 3 replies
  • 119 views

Hi All,

I'm new to PS but have been running RS for over a year now, we export syslog via webhooks on RS and PRA to our Rapid7 SIEM and it is working well, but I cannot seem to get it to work with PS. Any ideas?

    3 replies

    Pulitros144
    Pulitros144
    Veteran
    December 15, 2025

    ​@bevo1985 

    You will need to the the “Universal Connector” as PS cannot send a webhook:

    Universal Event Forwarder | BI

    PS
    bevo1985Author
    Rising Star
    December 15, 2025

    I have tried this and just get a failed to open connection.

     

    Any ideas?

     

     

    Pulitros144
    Pulitros144
    Veteran
    December 16, 2025

    I have tried this and just get a failed to open connection.

     

    Any ideas?

     

     


    That's because you are using a webhook URL. The correct approach is to create an HTTP Connector within Rapid7 and associate a port, let's say 8085, with it. You would then use that port information in the connector settings. Webhooks have too many intricacies for the universal connector to work reliably.

    You can check as well if the Resource Brokers associated with the “Default Zone” are able to connect to that url on that port as well, that might be your problem.

    PS

    Badge Earners

    Show all badges
    Terms & ConditionsAccessibility statement