One more question if I may. What next steps would be necessary if we want to use ACDI in our infrastructure?
Cybersecurity
DevOps Cloud
IT Operations Cloud
If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more.
One more question if I may. What next steps would be necessary if we want to use ACDI in our infrastructure?
The following steps are necessary:
If you need further help with this, please feel free to contact the ACDI product team:
perhaps you're also interested in the time you have to invest in these activities?
Yes indeed, that would be also good to know, thank you
Necessary time to spend:
ACDI is a little bit confusing as you can collect data a number of different ways.
1) Via a ACDI driver IDM that catches all events in the filter for the tree.
2) A new package for ACDI to add to each driver you want to instrument to collect more specific info. (i.e. #1 tells you an event happened. #2 tells you it was the AD driver).
3) Add ons to instrument the Workflows you might have. I would love to see a discussion of what the options here are. Will depend on use cases as always.
All 3 though send their data back to the same backend. So first you need the backend database/graphing/webserver. Then an IDM driver to collect generic events. Then contemplate if it makes sense to instrument your drivers or not.