CrowdStrike was recently adopted as NGSIEM by an enterprise security team encountering internal network administration friction integrating traffic logs from Juniper SRX 1600 firewalls.

{
  "signal_id": "596744c8-9d13-557e-aec5-72fea74c4e76",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-10-27T17:03:26+00:00",
  "company": {
    "name": "CrowdStrike",
    "domain": "crowdstrike.com"
  },
  "data": {
    "nsfw": false,
    "stage": "switched",
    "awards": 0,
    "timing": "completed",
    "topics": [
      "siem",
      "logging",
      "integration",
      "security"
    ],
    "post_id": "1xgy7xj",
    "summary": "CrowdStrike was recently adopted as NGSIEM by an enterprise security team encountering internal network administration friction integrating traffic logs from Juniper SRX 1600 firewalls.",
    "category": "integration",
    "comments": [
      {
        "url": "https://www.reddit.com/r/Juniper/comments/1xgy7xj/comment/19rqq21ek00ki/",
        "depth": 0,
        "score": 3,
        "author": "fatboy1776",
        "excerpt": "The only issue with sending data plane security logs is the potential to overwhelm your log server.\n\n Push back, you should have these logs.",
        "posted_at": "2026-10-27T17:37:46.000Z",
        "author_url": "https://www.reddit.com/user/fatboy1776/"
      },
      {
        "url": "https://www.reddit.com/r/Juniper/comments/1xgy7xj/comment/19rqp7u4ocezk/",
        "depth": 0,
        "score": 2,
        "author": "WTWArms",
        "excerpt": "Send the logs shouldn't be an issue, if logging is already enabled. Maybe the concern is enabling logging on the security policies?",
        "posted_at": "2026-10-27T17:18:58.000Z",
        "author_url": "https://www.reddit.com/user/WTWArms/"
      },
      {
        "url": "https://www.reddit.com/r/Juniper/comments/1xgy7xj/comment/19rr4v6z11bs2/",
        "depth": 0,
        "score": 1,
        "author": "Linklights",
        "excerpt": "He’s not fully wrong. Security log streaming on SRX platform is a little annoying to configure. In log streaming mode you have to send the logs from a revenue port, and can’t use the mgmt port/mgmt vrf. So depending on deployment that might mean sending the log stream from a public ip to a public ip.\n\n If you add security logs in non-streaming mode then it writes the log file locally and will redu",
        "posted_at": "2026-10-27T23:09:49.000Z",
        "author_url": "https://www.reddit.com/user/Linklights/"
      },
      {
        "url": "https://www.reddit.com/r/Juniper/comments/1xgy7xj/comment/19rsanfxtz6xx/",
        "depth": 0,
        "score": 1,
        "author": "kmai0",
        "excerpt": "You should have a log ingestion pipeline that sends to your default sink and a copy to cloudstrike.",
        "posted_at": "2026-10-28T14:46:38.000Z",
        "author_url": "https://www.reddit.com/user/kmai0/"
      }
    ],
    "evidence": [
      "[post] we have two SRX 1600s and recently moved to CrowdStrike.",
      "[post] My network administrator is pushing back hard on configuring the logging so that it sends traffic logs to our log collector because of guidance that it is risky somehow with the configs being out of sync?"
    ],
    "virality": "low",
    "post_date": "2026-10-27T17:03:26.000Z",
    "post_kind": "text",
    "post_text": "I am a Network security Engineer and we have two SRX 1600s and recently moved to CrowdStrike. My network administrator is pushing back hard on configuring the logging so that it sends traffic logs to our log collector because of guidance that it is risky somehow with the configs being out of sync?\n\nI am struggling to understand the issue with this. This seems like a minimal ask. Currently we are only getting system logs which serve no forensic value to me.\n\nIs this as big of an issue as he’s making it out to be? What am I missing?",
    "sentiment": "neutral",
    "subreddit": "Juniper",
    "event_date": "2026-10",
    "post_title": "Ingesting traffic logs from SRX into Crowdstrike NGSIEM",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/Juniper/comments/1xgy7xj/ingesting_traffic_logs_from_srx_into_crowdstrike/",
    "entity_role": "vendor",
    "post_author": "YourAnonGR",
    "upvote_ratio": 1,
    "mention_count": 2,
    "mention_surge": false,
    "subreddit_url": "https://www.reddit.com/r/Juniper/",
    "total_upvotes": 3,
    "comments_total": 8,
    "total_comments": 8,
    "event_date_text": "recently",
    "other_companies": [
      {
        "name": "Juniper Networks",
        "role": "partner",
        "domain": "juniper.net"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/YourAnonGR/",
    "signal_category": "feedback",
    "comments_included": 4,
    "products_mentioned": [
      "Crowdstrike NGSIEM"
    ]
  }
}

curl https://signals.autobound.ai/v1/signals/596744c8-9d13-557e-aec5-72fea74c4e76 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"crowdstrike.com","limit":20}'