Skip to main content
Solved

Ingestion dashboard in google instance

  • November 20, 2024
  • 1 reply
  • 24 views

Forum|alt.badge.img+2

Hello everyone, I have a question about a dashboard that I found in a repository in git hub which measures the daily intake in GB for Google SIEM. My question is about the filters, what is the exact amount it measures including all sources and integrations, I have the Forwarder, Ingestion API, Out of Brand Processor option selected by default, additionally the Normalizer option is unchecked, if the framework increases my intake considerably, should the latter be selected for an exact measurement or is it not necessary? 

 

 

 

 

Best answer by hzmndt

Normalizer is not required for ingestion calculation, it's the metrics related to parsing. 

1 reply

hzmndt
Staff
Forum|alt.badge.img+9
  • Staff
  • Answer
  • November 21, 2024

Normalizer is not required for ingestion calculation, it's the metrics related to parsing.