With v8.5.4, Multiplexer receives log data from Filtering Service and forwards it to the Bridge Service and to Log Server. When SIEM integration is enabled on the
Settings >General > SIEM Integration page, Bridge Service forwards SIEM data for processing. Log Server processes log data into the Log Database for use in reporting and copies the data to a specific folder for Cloud Apps Service to process into the Log Database.
When Bridge Service is not receiving data, is stopped, or is not responding, no cloud app (v8.5 and v8.5.3) or SIEM data can be forwarded to the appropriate service. SIEM logs and the Cloud Applications report (v8.5 and v8.5.3) do not show data for transactions logged while either of these services is stopped or not responding.