PingFederate

You can configure collecting PingFederate authentication logs using a Broker VM Syslog Collector applet:

PingFederate vendor Description
Syslog Collector applet overview Forward authentication logs from PingFederate to Cortex XSIAM using the Broker VM Syslog Collector applet in a CEF format.
Link to Syslog Collector applet instructions Ingest authentication logs from PingFederate