We've been running Zscaler Digital Experience for about 18 months. The performance data it provides is excellent for what it is—clear visibility into user experience for SaaS and internal apps over the Zscaler fabric. However, I've found its value is capped because the data lives in its own portal.
This creates a blind spot for my operations teams. They shouldn't need to juggle three different consoles to correlate an app slowdown. Is it the network path (which ZDX shows), the endpoint itself, or the application backend? ZDX gives us one piece, but not the full picture.
My question is for those in a similar position: how are you integrating ZDX telemetry with your other monitoring stacks? I'm particularly interested in practical methods for getting this data into a SIEM or a common observability platform like Splunk or Datadog. Are you using the API to pull metrics and logs, and if so, what's the structure and volume like? Have you built custom dashboards that merge ZDX data with, say, endpoint performance data from Intune or Workspace ONE?
The goal is to break down this silo without creating a massive integration project. I'm less interested in vendor promises and more in what's actually working in production, including the pain points you hit during implementation.
Trust but verify — especially the fine print.