Idea ID 2806518
As clients are moving to AWS and other cloud platforms, Just wanted to know is there any plan to introduce a S3 Bucket Arcisght Flex connector. In the sense, If a S3 bucket is exposed by the customer publicly, then the arcsight connector can be able to pull the logs from the bucket and send it to destination.
Cloud trail connector pull the logs from the bucket, but it still collect only the cloudtrail logs in the S3 bucket, We tried to get the NON cloudtrail logs through Cloud trail connector, but it fails. In the agent.log file, we can see that the connector read the file in the S3 bucket, but it just ignores as the log file is not in the CLOUD TRAIL logs.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.