Destinations

The destination configuration allows the inclusion of the specific requirements for connecting to a destination. Multiple destinations can be configured for various use cases and then these are paired with a configuration which specifies the types of data that is sent to that destination.

To add a new Destination,

1. Go to Preferences -> Integrations. Under Destinations, click on Add New.

2. In the Create New Destination pop-up window, provide the following information.

a. A Name to identify the destination.

b. The type field represents the method of connectivity used for the integration, at this time only HTTPS is supported.

c. URI should be the destination to which you want Cyberhaven to send the logs. This is would include the full URI and may include a port number as well e.g. https://mydestination.com:8080/logs/raw

d. Format represents the shape of the objects expected to be sent to the destination, at this time all logs are sent in JSON format.

e. The encoding option allows to decided if the content is compressed using GZip. Select this option only if your destination supports the GZip compression type. Otherwise, select None.

f. The option to Ignore SSL Errors allows to ignore errors related to SSL/TLS specifically around self-signed certificates. It is not recommended to utilise self-signed certificates in a production instance.

g. The Authentication settings allows the inclusion of a username and password for Cyberhaven to use to authenticate with the destination before sending the logs.

h. HTTP headers allows for the inclusion of any specific HTTP headers that may be required when establishing the connection. As a security measure, you can mark the header as private to encrypt the header information. When saved, the header information will no longer be visible and cannot be decrypted.

3. Click on Save and Test. The test is successful when Cyberhaven can send a test log to your destination.