IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  About AWS S3 VPC flow logs

    Posted 20 days ago

    Hi,

    For VPC flow logs, is it possible to specify an Event Collector that I have on AWS as the "Target Event Collector" and then forward the VPC flow logs to a Flow Processor? Or does the "Target Event Collector" have to be a Flow Collector?

    Thanks in advance

    Bye

    Simona



    ------------------------------
    Simona Vittori
    ------------------------------


  • 2.  RE: About AWS S3 VPC flow logs

    Posted 20 days ago

    You can forward to any flow collector in your deployment so, no, the the event collector does not also have to be a flow collector. Note, however that the forwarded flows from the event collector are not encrypted.



    ------------------------------
    Rory Bray
    Security and Compliance Architect, Threat Management
    IBM
    ------------------------------