---
title: SIEM integration · Cloudflare Email security (formerly Area 1) docs
description: SIEM integrations allow you to view message-level information
  outside of the dashboard and create your own custom reports.
lastUpdated: 2025-10-27T15:00:52.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/email-security/reporting/siem-integration/
  md: https://developers.cloudflare.com/email-security/reporting/siem-integration/index.md
---

Area 1 has been renamed

Area 1 is now **Email Security (formerly Area 1)**.

With a bit of configuration, you can also bring Email security (formerly Area 1) data into your Security Information and Event Management (SIEM) tools to view message-level information outside of the dashboard and create your own custom reports.

## Connect a SIEM tool

The following steps are required to connect your SIEM tool.

### 1. Set up your SIEM tool

For help setting up the proper configuration in your SIEM tool, refer to the following guides:

* [KnowBe4](https://developers.cloudflare.com/email-security/reporting/siem-integration/knowbe4-integration-guide/)
* [LogScale](https://developers.cloudflare.com/email-security/reporting/siem-integration/logscale-integration-guide/)
* [Splunk](https://developers.cloudflare.com/email-security/reporting/siem-integration/splunk-integration-guide/)
* [Sumo Logic](https://developers.cloudflare.com/email-security/reporting/siem-integration/sumo-logic-integration-guide/)

### 2. Create a webhook

Refer to [Alert webhooks](https://developers.cloudflare.com/email-security/email-configuration/domains-and-routing/alert-webhooks/) to learn how to create a webhook and send data into your SIEM tool.
