Version: Heroku.

Heroku is a container-based cloud platform as a service (PaaS) that is used to build, deploy, manage, and scale modern applications. It provides a set of features such as fine-grained access controls, identity federation, and private spaces to manage enterprise application development process, resources, and users.

Netsurion data source integration consists of dashboard (graphical representation of events), alerts (near real-time notification of important events), saved searches (for searching specific category of logs with a single click) and reports (structured and details information of events) to correct problems long before a disastrous failure occurs.

Netsurion Open XDR dashboard provides information about the geolocation from where the application has been accessed, error codes events, daily visit count for applications and much more.

Netsurion Data Source Integration for Heroku allows you to monitor the following components:

  • Security – Authentication failure, High Severity Events Detected
  • Operation – Commands Executed, Router Logs, Resource Utilization

After the Heroku is configured to deliver events to the Netsurion Open XDR, the dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.


Type Name Description
Security Heroku – Authentication Failure in Deployed Application This alert is generated when any authentication failure is detected in the deployed application.
Security Heroku – High Severity Events Detected This alert is generated when high severity (error, critical, warning) events are detected.


Type Name Description
Operations Heroku – Resource Utilization This report gives the information about the resource utilization by an application deployed in Heroku. Drain Id is the syslog drain id associated with a specific app which tracks the application performance. Report contains CPU load and memory utilization information.
Operations Heroku – Router Logs This report gives the information about actions taken by the Heroku platform infrastructure on behalf of your app, such as restarting a crashed process, sleeping or waking a web dyno, or serving an error page due to a problem in your app, access of application from an user. It contains the IP from where the application has been accessed, contains protocol, status code, application pages/asset that has been accessed, connect and service time, and bytes transferred.
Operations Heroku – Command Executed This report contains information about commands executed and messages about administrative actions taken by the developers working on app deployed in Heroku such as toggling maintenance mode, deploying new code, etc.


The configuration details are consistent with Netsurion Open XDR 9.3 or later, and Heroku.

Download Integration Guide and How-to Guide for configuration instructions and more information.