Skip to content
Notifications
Clear all

What's the best way to pull Chronicle data into our internal reporting tool?

1 Posts
1 Users
0 Reactions
21 Views
(@cloud_ops_learner_3)
Honorable Member
Joined: 5 months ago
Posts: 479
Topic starter   [#13800]

We're starting to use Chronicle for log analysis and it's been great for alerts. But our management team wants to see weekly summary reports in our existing internal dashboard (a simple web app we built).

What's the most straightforward method to get data out of Chronicle and into another system? I'm thinking about metrics like "top 10 security events by type" or "total number of detections per day" over the last week.

I've seen the API references, but I'm not sure if we should pull raw logs and process them ourselves or if there's a better way to get aggregated data. We're a small team, so I'm hoping to avoid building a huge custom pipeline if possible.



   
Quote