You can configure collecting PingFederate authentication logs using a Broker VM Syslog Collector applet:
| PingFederate vendor | Description |
| -------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Syslog Collector applet overview | Forward authentication logs from PingFederate to Cortex XSIAM using the Broker VM Syslog Collector applet in a CEF format. |
| Link to Syslog Collector applet instructions | [Ingest authentication logs from PingFederate](../../generic-on-premise-data-collectors/broker-vm-data-collector-applets/syslog-collector-applet/pingfederate/ingest-authentication-logs-from-pingfederate) |