Effective August 18, 2023, the integration between Rapid7 and Nebula has reached its End of Maintenance (EOM). While the integration remains available for use, we would like to inform you that it will no longer receive updates. We encourage you to exercise caution when using this integration, as any use will be at your own risk. We are committed to providing ongoing support for common product usage questions and access to our online articles.
The integration allows you to track and report Nebula events in Rapid7's InsightIDR.
In Nebula, designate a managed Windows™ device as the syslog communication endpoint. That communication endpoint sends the security event data to a Windows or Linux™ server that you have designated as the Collector. The Collector sends the syslog file to InsightIDR which gives you a view of Nebula security events.
Return to the Rapid7 InsightIDR and Nebula integration guide.