We now support a generic Log Streams destination, HTTP POST, that allows you to stream Audit Log events directly from your application to any SIEM provider of your customer that can accept HTTP POST requests with a JSON payload.
You can configure Log Streams for your customers in the WorkOS Dashboard or your customers can configure it themselves in the WorkOS Admin Portal.