The audits from the PAM server can be sent to any syslog server and these events can also be logged in the SIEM system like Sentinel, Arcsight or any other third-party syslog server.
Use this page to configure Privileged Access Manager so that it can send syslog messages to a syslog server. This server can be a Sentinel server, a Sentinel Log Manager, or a syslog server that supports TCP with optional TLS or SSL support. Older syslog servers require UDP for the transport protocol.