For this log source type, contact Anomali Customer Support for assistance. Anomali Customer Support will facilitate the onboarding and management of log sources for all cloud-to-cloud data flows, including onboarding this log source type. To get started, let your Anomali representative know that your organization is ready to add its event telemetry from this log source.

Network Topology and Requirements

Anomali Cloud Link ingests event telemetry that has been forwarded to cloud storage, such as Amazon Web Services S3, Microsoft Azure Event Hub, or Google Cloud Storage. For these types, Anomali Security Analytics initiates queries to retrieve logs.

• Your network security rules must allow traffic from Security Analytics to your dedicated cloud storage.

• Connections are initiated from Cloud Link to your cloud storage.

• Cloud Link sends requests to port 443/https.

• Refer to Anomali Security Analytics IP Addresses, Ports, and URLs for Security Analytics network details that your network and security needs to know to allow communication from your enterprise resources to your Security Analytics deployment.