This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Has anyone here ingested data to SIEM via a temporary label and then
migrated to a new data label? We recently requested a new label for a
net new data source and we're looking for the best way to migrate to
this new data label.From what were hearing...
Recently we've been having trouble getting several Chronicle Ingestion
scripts working (found here
https://github.com/chronicle/ingestion-scripts) and have been having to
build custom workarounds that output to GCS buckets instead, however
this is un...
so since we were implementing it for a client, we don't have good data
to use, but it was a standard json format that matches the type
chronicle was looking for
