Skip to main content

Is this type of SIEM needs agents to be installed on the client host?

  • February 2, 2022
  • 1 reply
  • 4 views

Forum|alt.badge.img

I will like to know, if this type of SIEM needs agents to be installed on the client host?

1 reply

Forum|alt.badge.img+2
  • Bronze 1
  • November 14, 2023

Hi @Eddy_Guzman - Chronicle SIEM typically uses a data forwarding service to ingest security logs from a client's host (non-Cloud storage). Here is a link to an Overview of data ingestion from our Chronicle SIEM documentation site: https://cloud.google.com/chronicle/docs/data-ingestion-flow?hl=en