Install Integration on one or multiple endpoints?

Elastic Stack Elastic Agent
,
1

Hello,

How do we know if an Integration should be installed on one endpoint of multiple?

  • Microsoft 365 Integration, if pushed to multiple endpoints, would be redundant and duplicate the data right?

  • Elastic Defend, on the other end, is unique for each endpoint and should be deployed to multiple.

  • Google Workspace Integration, should only be pushed to 1 endpoint, there's no purpose to push it to multiple.

Now, I'm looking at Alienvault OTX, and I have no idea if I should push it to one endpoint, or multiple, how to find out?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.