CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ52

VerifiedData Ingestion and Connectors

You need to ingest a data source into Next-Gen SIEM. A prebuilt Pull connector is available.

What is needed to configure the connector?

Explanation

A Pull connector authenticates to and retrieves data from the external source, so configuration requires that data source’s API key. HEC credentials and Falcon ingestion endpoint details are used to send data into Falcon rather than to authorize retrieval from the source.

Community Discussion

No comments yet. Be the first to start the discussion!