QuestionQ7

VerifiedPlanning and Installation

An application that ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server and logs locally to a .csv file.

Which set of actions enables ingestion of the .csv logs into Cortex XSIAM directly from the server?

Explanation

Cortex XSIAM’s XDR Collector can be installed on Linux servers, including Ubuntu, and its Linux Filebeat profile collects file and log data using a configurable filebeat.yml source path. Installing the XDR Collector on the Ubuntu host therefore enables direct ingestion of the locally written CSV log file. Add an XDR Collector profile for Linux Install the XDR Collector installation package for Linux

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!