---
url: https://docs.realmsec.info/integration/prisma_access.md
---

# Prisma Access Integration

![Prisma Access Architecture](../images/prisma-access-diagram.png)

### Send Prisma Access Logs to Realm

This guide walks you through connecting [Prisma Access](https://www.paloaltonetworks.com/sase/access) to Realm. Prisma Access uses the Strata Logging Service to forward logs to external HTTPS endpoints — Realm exposes a Splunk HEC-compatible endpoint that receives these logs directly, then routes them through your data pipeline to your configured destination.

## Prerequisites

* Active Prisma Access deployment managed via Strata Cloud Manager
* Administrator access to the Strata Cloud Manager and Strata Logging Service
* Access to the Realm Security console

## Configure the Integration in Realm

Before configuring Prisma Access, create a Source and Splunk HEC input feed in Realm to obtain the endpoint URL and token.

1. In Realm, go to **Sources > Add Source**.
2. Select the `Prisma Access` source, then enter a name for the source:
3. Click **Next**.
4. On the **Select Transport Method** step, select **Splunk HEC** and give it a name (e.g. `Prisma Access HEC`).
5. Click **Save**.
6. Select the desired destination for this data and click **Save**
7. Click **`...` > Edit** on the newly created input feed.
8. Click the eye icon in the token field to reveal the token value.
9. Copy the **HEC Endpoint URL** and **Token**.

> **Important:** Save the HEC Endpoint URL and Token now — you will need them in the next step.

## Configure Log Forwarding in Strata Cloud Manager

1. Log in to [Strata Cloud Manager](https://stratacloudmanager.paloaltonetworks.com/).

2. Navigate to **Settings > Strata Logging Service > Log Forwarding**.

3. Click **Add** to create a new forwarding profile.

4. Configure the HTTPS destination using the values copied from Realm:

   > **Name:** `Realm Security`\
   > **Destination Type:** `HTTPS`\
   > **Payload Format:** `Splunk HEC`\
   > **URI:** `<your Realm HEC Endpoint URL>`\
   > **Token:** `<your Realm HEC Token>`

5. Select the log types to forward (e.g., Traffic, Threat, URL Filtering, Authentication).

6. Click **Save** and confirm the forwarding profile is active.

Once saved, Prisma Access will begin forwarding logs to Realm via the Splunk HEC endpoint.

> **Note:** For more details on configuring HTTPS log forwarding in Strata Logging Service, refer to the [Palo Alto Networks documentation](https://docs.paloaltonetworks.com/strata-logging-service/administration/forward-logs/forward-logs-to-an-https-server).