---
title: Cato Networks
description: Gain insights into Cato Networks audit logs and events.
breadcrumbs: Docs > Integrations > Cato Networks
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Cato Networks
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}
            Cato Networks OverviewCato Networks OverviewCato Networks EventsCato Networks EventsCato Networks EventsCato Networks EventsCato Networks Audit LogsCato Networks Audit Logs
## Overview{% #overview %}

[Cato Networks](https://www.catonetworks.com/) provides a single-vendor Secure Access Service Edge (SASE) platform that converges SD-WAN, global private networking, and a full network security stack into a cloud-based service.

This integration ingests the following logs:

- **Audit Logs**: These logs provide detailed information on admin actions performed within the system.
- **Events**: These logs provide detailed insights into security, detection and response, connectivity, and system events within the Cato Networks platform.

Integrate Cato Networks with Datadog to gain insights into audit logs and events using pre-built dashboard visualizations. Datadog uses its built-in log pipelines to parse and enrich these logs, facilitating easy search and detailed insights. Additionally, the integration can be used for Cloud SIEM detection rules for enhanced monitoring and security.

## Setup{% #setup %}

### Audit Log Collection{% #audit-log-collection %}

#### Obtaining Client Credentials{% #obtaining-client-credentials %}

1. Log in to Cato Networks platform and navigate to **Resources** > **Service API Keys**.
1. In the **Service API Keys** tab, click **New** and provide the following details:
   - Select the **Service Principal**.
   - Enter the **Key Name**.
   - Set the **API Permission** as **Downgrade to View**.
   - Set **Any IP** under the **Allow access from IPs** section.
1. Click **Apply** button and copy the **Token**.
1. Navigate to **Account** > **Account Info** and copy the **Account ID**.
1. Identify your Cato Networks Region by checking the prefix of your URL:
   - `cc.us1.catonetworks.com` - us1
   - `cc.catonetworks.com` - Keep region as empty

#### Connect your Cato Networks Account to Datadog{% #connect-your-cato-networks-account-to-datadog %}

1. Add your `Cato Account ID`, `API Token` and `Region`.
| Parameters      | Description                                         |
| --------------- | --------------------------------------------------- |
| Cato Account ID | The account ID from your Cato Networks platform URL |
| API Token       | The API Token of your Cato Networks platform        |
| Region          | The prefix from your Cato Networks platform URL     |
1. Click **Save**.

### Event Log collection{% #event-log-collection %}

#### Configure AWS S3 Bucket{% #configure-aws-s3-bucket %}

For more information about configuring an AWS S3 Bucket, see [Configuring the AWS S3 Bucket](https://support.catonetworks.com/hc/en-us/articles/9726441847965-Integrating-Cato-Events-with-AWS-S3#h_01K06PD8YPXBZJH5P0BP625BB1).

#### Set up event integration in CATO networks{% #set-up-event-integration-in-cato-networks %}

For more information on configuring the event integration in a CATO network, see [Adding Amazon S3 Integration for Events](https://support.catonetworks.com/hc/en-us/articles/9726441847965-Integrating-Cato-Events-with-AWS-S3#h_01K06PD8YP6JCM5618J4YYDFAS).

#### Configure Datadog Forwarder{% #configure-datadog-forwarder %}

See the [Datadog Forwarder](https://docs.datadoghq.com/logs/guide/forwarder.md?tab=cloudformation) documentation for detailed configuration instructions. When configuring the Datadog Forwarder, set the **source** as follows:

- For CloudFormation deployments, set `DdSource` to `cato-networks`.
- For Terraform deployments, set `dd_source` to `cato-networks`.
- For manual deployments, set the `DD_SOURCE` environment variable to `cato-networks`.

## Data collected{% #data-collected %}

### Logs{% #logs %}

The Cato Networks integration collects and forwards audit logs and events to Datadog.

### Metrics{% #metrics %}

The Cato Networks integration does not include any metrics.

### Events{% #events %}

The Cato Networks integration does not include any events.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).