Destinations

Choose this destination when your collectors should land OCSF-shaped logs in Amazon Security Lake. The exporter groups records by custom source, event day, and OCSF class_uid, writes ZSTD-compressed Parquet per group, and uploads objects to your Security Lake S3 bucket using the partition layout Security Lake expects (ext//region=…/accountId=…/eventDay=YYYYMMDD/…).

📄️Dash0

Overview

📄️Databricks

Overview

📄️Debug

Overview

📄️Google Cloud Storage

Overview

📄️Google SecOps

Choose this destination when your collectors should deliver logs straight into Google Security Operations (Chronicle)—either over gRPC to the regional ingestion endpoint most teams use by default, or over https when your SecOps rollout expects the v2 ImportLogs REST API.

📄️Google SecOps Data Processor Integration

Overview

📄️HPE OpsRamp

Overview

📄️Microsoft Sentinel

Choose this destination when your collectors should deliver logs into Microsoft Sentinel using the Azure Monitor Logs Ingestion API. Praxis groups records by the stream you declare on your Data Collection Rule (DCR), gzip-compresses batches, and posts them to your Data Collection Endpoint (DCE). Records are expected to carry OCSF class_uid so they can be routed to the correct DCR stream (including a catch-all stream when you map class_id 0).