CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ37

VerifiedData Ingestion and Connectors

Which mode correctly enrolls LogCollector in Fleet Management when the log-source configuration is stored and managed centrally in Next-Gen SIEM?

Explanation

Full mode enrolls the Falcon LogScale Collector into Fleet Management and centrally stores and manages its source and sink configuration in LogScale/Next-Gen SIEM. The localConfig mode instead keeps log-source configuration in a local YAML file on the host.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!