Hello Xcitium Team,

We are currently managing our enterprise security infrastructure using Xcitium solutions and actively integrating endpoint security data into our central monitoring pipelines.

While we are aware that XCS security events (including Auto-Containment logs) can be forwarded to a syslog server via profile settings, we have a critical requirement for EXDR (Endpoint XDR) agent alerts and events.

Currently, EXDR agent data cannot be forwarded to third-party syslog servers, nor is it accessible via an existing public API. This limitation creates a significant blind spot for centralized SIEM / SOC correlation workflows where EXDR insights are crucial.

Requested Features:

Direct and configurable syslog forwarding for EXDR agent alerts and events.

A robust public API to programmatically fetch EXDR events and alerts for 3rd party integration.

Implementing these capabilities will greatly enhance the enterprise visibility and operational value of the EXDR solution.

Thank you for considering this request.

Best regards,

Baver Çetiner