What feature enables Zscaler logs to be sent to SIEM solutions for long-term storage?

Zscaler's Log Streaming Services, specifically the Nanolog Streaming Service (NSS), is the feature designed to send logs to external Security Information and Event Management (SIEM) solutions. NSS provides a real-time, direct stream of transaction logs from the Zscaler Nanologs to a customer's SIEM. This allows organizations to integrate Zscaler data with their broader security analytics, perform long-term log archival, and conduct forensic analysis without needing to manually export data or use APIs for bulk retrieval.

A. Role-Based Access Control (RBAC) is a security mechanism used to restrict system access to authorized users based on their roles, not for log streaming.

B. Zero Trust Exchange Query Engine is not a standard Zscaler product name for log streaming; it does not represent a specific feature for SIEM integration.

C. Log Recovery Service is not a feature for streaming logs to a SIEM. Zscaler stores logs for a limited time, but NSS is the designated service for continuous export.

1. Zscaler Help Portal. (n.d.). About Nanolog Streaming Service. Retrieved from Zscaler Help Portal. "The Zscaler Nanolog Streaming Service (NSS) is a virtual machine (VM) that resides in your organization’s network and streams traffic logs in real time from the Zscaler Nanolog to your security information and event management (SIEM) system..."

2. Zscaler Help Portal. (n.d.). NSS Feeds. Retrieved from Zscaler Help Portal. "You can add one or more NSS feeds for each log type to specify the data that you want the NSS to send to your SIEM."