▲ 2 r/crowdstrike
Any help would be appreciated I setup a SIEM connector via the API Client module. I followed the instructions to a tee but I am unable to see any events coming in. We did it in CEF format and the service is on an active but no events are coming in at all. I was sure to enable event streaming for the API client is there any other scopes I need or does anyone have any ideas?
u/Dependent-Ad833 — 8 days ago