Hi everyone,
lately i had a doubt that maybe you could sort out.
What is the difference between implementing the universal siem forwarder
- via the SPS Web interface ( Basic Settings > Management > Universal SIEM forwarder)
- by using thie API procedure (POST the JSON object to the https://<IP-address-of-SPS>/api/configuration/management/universal_siem_forwarder endpoint)
Would i have the same result? Would i be able to see the same configuration in the SPS Web interface if i would have used the API method?
Is that the only way to implement SIEM Forwarder via API?
Thank you,
Simone
