> For the complete documentation index, see [llms.txt](https://docs.teiren.io/teiren-siem/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.teiren.io/teiren-siem/features/resource-management/registration.md).

# Registration

Register the products from which you want to collect logs here.

{% hint style="success" %}
Do you have a product you'd like to integrate? I'll create it for you! Please leave your suggestions [here](https://teiren.io/contact). On average, you'll receive a response within 1-2 days. Developing the related feature will take a minimum of 2 weeks to a maximum of 4 weeks.
{% endhint %}

## Cloud Service Platform

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FLFlZ9ICFw4ux51NfpDa5%2Fimage.png?alt=media&amp;token=018c51df-43bd-4892-9e7c-112bdb25edcb" alt=""><figcaption></figcaption></figure>

### AWS

To facilitate the integration of your AWS Cloud, you need to provide the following information:

1. **Creating IAM Account For Teiren**

This is a crucial step to ensure secure and appropriate access to your resources. When creating an IAM for TEIREN SIEM, it's important to assign the correct roles to your IAM account. These roles determine the permissions for the IAM account and ensure it can perform necessary operations within TEIREN SIEM. It is essential for the IAM account to have access to actions included in the Json below.

{% code overflow="wrap" lineNumbers="true" %}

```json
{
  "Statement": [
    {
      "Action": [
        "apigateway:GET",
        "autoscaling:Describe*",
        "backup:List*",
        "budgets:ViewBudget",
        "cloudfront:GetDistributionConfig",
        "cloudfront:ListDistributions",
        "cloudtrail:DescribeTrails",
        "cloudtrail:GetTrailStatus",
        "cloudtrail:LookupEvents",
        "cloudwatch:Describe*",
        "cloudwatch:Get*",
        "cloudwatch:List*",
        "codedeploy:List*",
        "codedeploy:BatchGet*",
        "directconnect:Describe*",
        "dynamodb:List*",
        "dynamodb:Describe*",
        "ec2:Describe*",
        "ec2:GetTransitGatewayPrefixListReferences",
        "ec2:SearchTransitGatewayRoutes",
        "ecs:Describe*",
        "ecs:List*",
        "elasticache:Describe*",
        "elasticache:List*",
        "elasticfilesystem:DescribeFileSystems",
        "elasticfilesystem:DescribeTags",
        "elasticfilesystem:DescribeAccessPoints",
        "elasticloadbalancing:Describe*",
        "elasticmapreduce:List*",
        "elasticmapreduce:Describe*",
        "es:ListTags",
        "es:ListDomainNames",
        "es:DescribeElasticsearchDomains",
        "events:CreateEventBus",
        "fsx:DescribeFileSystems",
        "fsx:ListTagsForResource",
        "health:DescribeEvents",
        "health:DescribeEventDetails",
        "health:DescribeAffectedEntities",
        "kinesis:List*",
        "kinesis:Describe*",
        "lambda:GetPolicy",
        "lambda:List*",
        "logs:DeleteSubscriptionFilter",
        "logs:DescribeLogGroups",
        "logs:DescribeLogStreams",
        "logs:DescribeSubscriptionFilters",
        "logs:FilterLogEvents",
        "logs:PutSubscriptionFilter",
        "logs:TestMetricFilter",
        "organizations:Describe*",
        "organizations:List*",
        "rds:Describe*",
        "rds:List*",
        "redshift:DescribeClusters",
        "redshift:DescribeLoggingStatus",
        "route53:List*",
        "s3:GetBucketLogging",
        "s3:GetBucketLocation",
        "s3:GetBucketNotification",
        "s3:GetBucketTagging",
        "s3:ListAllMyBuckets",
        "s3:PutBucketNotification",
        "ses:Get*",
        "sns:List*",
        "sns:Publish",
        "sqs:ListQueues",
        "states:ListStateMachines",
        "states:DescribeStateMachine",
        "support:DescribeTrustedAdvisor*",
        "support:RefreshTrustedAdvisorCheck",
        "tag:GetResources",
        "tag:GetTagKeys",
        "tag:GetTagValues",
        "xray:BatchGetTraces",
        "xray:GetTraceSummaries"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}
```

{% endcode %}

{% hint style="danger" %}
Please note, assigning the appropriate roles is a critical security measure. It ensures that your IAM account has the necessary access it needs, without exposing your resources to unnecessary risks.
{% endhint %}

2. **Integrate AWS CloudTrail/CloudWatch ELB/CloudWatch DNS Logs**

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FE4QJKwoNa2ahqDq7SDFU%2Fimage.png?alt=media&amp;token=ff304177-99dd-45a9-abac-c3a7d6517e59" alt="" width="348"><figcaption><p>Integration with AWS</p></figcaption></figure>

Please register the information for the AWS account to be integrated into Teiren SIEM. The descriptions for the fields are as follows:

<table><thead><tr><th width="155">Field</th><th>Description</th></tr></thead><tbody><tr><td>Access Key</td><td>This is a unique identifier that is associated with an AWS Identity and Access Management (IAM) user. The access key is used to programmatically call AWS services. You can create, retrieve, or delete an access key for your AWS account from the IAM console. More details can be found at <a href="https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys">Click Here</a></td></tr><tr><td>Secret Key</td><td>This is a key that is used in conjunction with the Access Key to cryptographically sign programmatic AWS requests. Signing a request identifies the sender and ensures the request is unaltered in transit. You can manage your secret keys the same way as access keys through the IAM console.</td></tr><tr><td>Region Name</td><td>AWS Cloud operates in multiple locations worldwide. These locations are composed of regions and Availability Zones. Each region is a separate geographic area with multiple, isolated locations known as Availability Zones. You can select your region from the AWS Management Console. More on AWS regions and zones can be found at <a href="https://aws.amazon.com/about-aws/global-infrastructure/">Click Here</a></td></tr><tr><td>Log Group Name</td><td>A log group is a group of log streams that share the same retention, monitoring, and access control settings. You can assign a name to each log group. This can be done in the CloudWatch console, under the Log groups section. More on AWS CloudWatch logs can be found at <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html">Click Here</a></td></tr></tbody></table>

3. **Confirm AWS Accout Information**

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FFQwpKpIfBjjPrOkC3rMB%2Fimage.png?alt=media&amp;token=81e3ddb6-8cc2-4d6e-8b85-613afc4c0241" alt="" width="198"><figcaption></figcaption></figure>

Click the button above to verify if the AWS Account exists. If you encounter any issues with the integration, please leave an inquiry [here](https://teiren.io/contact).

## Security Solution

### Fortigate (Fortinet Firewall)

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FwyZspWREA0MjkMcwDWk3%2Fimage.png?alt=media&amp;token=4d2219c9-d8c6-41b5-8e4e-6f6f155547fc" alt="" width="375"><figcaption></figcaption></figure>

Enter the API KEY for Fortigate and click the \[Confirm Fortigate Information] button to complete the integration.

### Genians NAC

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2F0bz1kr4ZHWSq1ph6ZW8o%2Fimage.png?alt=media&amp;token=f3eace3e-d42b-4ae2-a1a6-beff8b916beb" alt="" width="375"><figcaption></figcaption></figure>

Enter the API KEY for Genians NAC and click the \[Confirm Genians NAC Information] button to complete the integration.

## Database

### MSSQL

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FmtHTnUqo9vCpRtTHpkVo%2Fimage.png?alt=media&amp;token=fe7e984d-1840-4f27-aae7-d85767ba8268" alt="" width="375"><figcaption></figcaption></figure>

Enter the Server IP, Database Name, User ID, User Password, and Table Name for the MSSQL server in sequence, then click the \[Confirm Fortigate Information] button to complete the integration.

## SYSTEM

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2Ft6b5nZG8PdvdDFBu4I44%2Fimage.png?alt=media&amp;token=b6bc5c1f-190b-4aab-b4ef-09a198616594" alt=""><figcaption></figcaption></figure>

For system integration (Windows, Linux, etc.), an agent is provided to the user. Please download the respective file and install it.

## Network Transmission

<figure><img src="https://935013446-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FjMFZQXUlOE1Xloesx3sz%2Fuploads%2FIFojg6UWb5bjkb16pyoj%2Fimage.png?alt=media&amp;token=80bc1572-2623-4917-9675-7879ee2a581e" alt="" width="375"><figcaption></figcaption></figure>

Enter the Protocol, Source IP, Destination Port, Log Tab in sequence, then click the \[Confirm Network Transmission Information] button to complete the integration.