Configuring an Output with LimaCharlie

Configuring an Output with LimaCharlie

In this video we demonstrate how to configure an Output in LimaCharlie to send your telemetry anywhere.

LimaCharlie users can relay their data anywhere they want for longer term storage and analysis. Where that data is sent depends on which Outputs are activated. You can have as many Output modules active as you want. For example you can send varying levels of data to multiple syslog destinations using the Syslog Output module and then send additional data to some cold storage over an Scp Output module.

Output is split between four categories: "event", "detect", "audit" and "deployment". Selecting a Stream when creating an Output will select the relevant type of data to flow through it.

Exact configuration possibilities in the Output section:

General Links



Free Education:

Course Playlists

Basic Detection & Response:

Advanced Detection & Response:

Secure Access Service Edge:

Leveraging Community Resources:

Setting up An MSSP:

Using the CLI & SDK:

Ingesting Log Files & Artifacts:

Zeek Network Monitoring:

Incident Response:

Real-time Windows Event Logs:

Responding to HAFNIUM:

The Add-on Marketplace:

Social Media

Community Slack Channel: