File and folders collector

[Ulkar_Hasanova]

Hi community,

I have questions about setting up file and folder collector.I do not understand what the inclusion of logs of this collector gives us.How can I view all files of any formats that are in the folder?What is the vendor and product responsible for?I ask you to bring an example, in the official guide it is written very briefly

Cortex XDR  

[etugriceri]

Hi Ulkar, 

What this collector is gives us ?

Actually this is directly related what you want to collect and analyses. This collector might read, application logs or network device logs, OS logs etc. changes based on your scenario. 

You cannot view remotely formats but you can filter remotely what you want to collect. 

You can use wildcard in "Include" part. (like *.json)

Product and Vendor is generally helping for automatic parsing or keeping data in specific dataset. 

If you write Vendor = X and Product = Y 

Your collected data will be in X_Y_raw dataset.

I hope that helps