Hi,
I'm using Google Chronicle, but in the provided examples of Forwarder's config there is no options for syslog encryption/TLS. Is TLS for syslog supported by Chronicle? What about mutual TLS authentication? And if not, do you know when it will happen for both?
Thank you
Hi,
You can enable Transport Layer Security (TLS) for the Syslog connection to the Chronicle forwarder. Please check the document [1]. In the Chronicle forwarder configuration file, specify the location of your certificate and certificate key.
There is no indication to mTLS with Chronicle in Google documentation, but it is used in the Google Cloud design with different products such as in [2], [3] and [4] mention.
[1]
@Oubi - I tried the [1] reference and I am getting an error the file I am referencing is not there.
" 489 run_command.go:60] there is a problem accessing the file defined in "certificate" (/opt/chronicle/config/certs/cert.pem): stat /opt/chronicle/config/certs/cert.pem: no such file or directory"
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.