Skip to main content

Forward OS Log to Chronicle

  • August 24, 2023
  • 3 replies
  • 23 views

Forum|alt.badge.img+1

After I deploy Chronicle Forwarder on Linux or Windows. Does Chronicle Forwarder transmit my OS data to Chonicle through the Internet?

Can I establish a secure tunnel such as IPSec VPN between our data center and Chonicle to ensure data security and link stability?

3 replies

Forum|alt.badge.img
  • New Member
  • August 24, 2023

Hi @pwckimmy - the data is sent from the forwarder to Chronicle via https so is using in-flight encryption.


Forum|alt.badge.img+1
  • Author
  • New Member
  • August 25, 2023

Hi @pwckimmy - the data is sent from the forwarder to Chronicle via https so is using in-flight encryption.


Thank you for your answer.

Is it possible to create a vpn tunnel to make the link more stable.


Forum|alt.badge.img
  • New Member
  • September 1, 2023

Thank you for your answer.

Is it possible to create a vpn tunnel to make the link more stable.


Apologies for the slow response...

You can't deploy a VPN endpoint directly into Chronicle, but if your Forwarder is deployed in GCP you can route to Chronicle over Private Connect, so I assume you could do some routing wizardry to get from an on-premise Forwarder to GCP via VPN and then into Chronicle via Private Connect, but I have never tested a configuration like that.

This seems like adding needless complexity, tho.