Hello,
Just wanted to ask if its possible to intergrate FortiDLP with Elastic...if so based on the methode or mode below can we use :
Event ingestion modes
The Event Streaming Service supports two modes of event ingestion:
- Websocket mode: A mode in which the SIEM tool connects to the API via a websocket connection. In this mode, the websocket connection maintains a persistent connection to the event stream, meaning events are continuously streamed to the SIEM tool.
- Long polling mode: A mode in which the SIEM tool requests a batch of events from the API via HTTP. In this mode, the batch of events received includes those already queued in the stream and/or those queued within 30 seconds from the time of the request.
Your assistance will be appreciated
Thanks