Sinks

HyperSec HyperCollector Settings -> Sinks

The HyperSec HyperCollector requires Sinks to be configured to deliver events to Upstream systems such as XDR or a SEIM.

The Web Interface provides the ability to configure the following Sink Types:

• HTTP - HTTP or HTTPS

• Kafka

• AWS S3

• Vector

Each Sink has sink specific configuration requirements detailed on each Sink's Settings page.

Create Sink

To create a sink, select the Create New Sink button. Select the sink Type from the drop-down menu.

Provide a name for the sink, this should be an alpha-numeric labels and can include dashes and underscores.

Event Types

Events can be routed to specific sinks using the Event Types input box and the Syslog Labels input box.

The Event Types match the inbuilt event types for the Sources and Metrics. These can be selected per sink to have these event types routed to that sink. Multiple sinks can select the same event types.

Syslog Labels

Syslog Labels match the labels specified in the Syslog Source Port Listeners. These can be selected per sink to have these event types routed to that sink. Multiple sinks can select the same syslog labels.

TLS

Enforce encryption between clients and the HyperCollector.

Verify Certificate

Require the destination sink to have a valid TLS certificate. The certificate must not be expired and must be issued by a trusted issuer.

Do not set this to false unless you understand the risks of not verifying the validity of certificates,

Verify Hostname

Require the hostname used to connect to the remote host to be present in the TLS certificate presented by the remote host, either as the Common Name or as an entry in the Subject Alternative Name extension

Do not set this to false unless you understand the risks of not verifying the validity of certificates,

Certificate Authority

Select the Certificate Authority to use to verify client certificates. Certificate Authority files can be uploaded through the Certificates File Manager.

Certificate

Select the Certificate to identify this HyperCollector. Certificate files can be uploaded through the Certificates File Manager.

Private Key

Select the Private Key to identify this Collector. Private Key files can be uploaded through the Certificates File Manager.

If the destination sink requires TLS select the TLS checkbox and configure the TLS settings.

Default Sink

One sink can be selected as the default sink. Any event type or syslog label that does not match any other sink will be delivered to the sink marked as default.

Select the Default checkbox or toggle to specify a sink as the default sink. If another sink has previously been set as the default sink this will override that setting.