CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ26

VerifiedData Ingestion and Connectors

You need to ingest data from a custom internal application hosted on-premises. The application writes logs to a file on a syslog server.

Which data connector should you use?

Explanation

An HTTP Event Connector is suitable for custom on-premises log sources because a collector or log shipper can read the syslog file and send the events to the HTTP ingestion endpoint. HTTP Event Collector ingestion supports structured and unstructured data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!