Considerations
Considerations
- Only the last seven days of information is stored in AWS S3 Buckets. The events that can be retrieved by the Metastream Client are limited to those seven days.
- There are multiple types of events stored in AWS S3 Buckets by the FortiNDR Cloud Service. All of the events are accessible and can be retrieved from AWS S3 Buckets. However, it is not recommended to import all the events since this would be a very large amount of information.
- The Metastream Client allows users to interact with the AWS S3 Bucket and import selected data from it. Only Suricata and Observations are supported by the latest version (v1.0.3) of this library.
Considerations
Considerations
- Only the last seven days of information is stored in AWS S3 Buckets. The events that can be retrieved by the Metastream Client are limited to those seven days.
- There are multiple types of events stored in AWS S3 Buckets by the FortiNDR Cloud Service. All of the events are accessible and can be retrieved from AWS S3 Buckets. However, it is not recommended to import all the events since this would be a very large amount of information.
- The Metastream Client allows users to interact with the AWS S3 Bucket and import selected data from it. Only Suricata and Observations are supported by the latest version (v1.0.3) of this library.