diff --git a/doc/dataingestion.md b/doc/dataingestion.md index 128a444f240654cb0f6deb6cf17f5ff6a05a9023..c2e2cd4399db6341765668bf980c10550bb1b4e9 100644 --- a/doc/dataingestion.md +++ b/doc/dataingestion.md @@ -42,6 +42,8 @@ The extra filed log_type tells Nifi how it should route the data to the correct * zeek * zookeeper +Support for shipping logs over TLS will be added in a future version of SOCTools. + ## New log types New unsupported log types can be sent to SOCTools port 6006 using Filebeat. Similar configuration as above. By default new data types will be sent to the index logs-custom-unknown. Proper parsing of new log types can be added to the process group "Custom data inputs".