diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source.md index 5012754f06..dbae0eecb8 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source.md @@ -16,8 +16,11 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; armis-icon.png -Armis API is a device security platform that discover devices, tracks behavior, detects threats, and takes action to protect your business. -The Source integration ingests alert and device data from the Armis platform. +Armis API is a device security platform that discover devices, tracks behavior, detects threats, and takes action to protect your business. The Source integration ingests alert and device data from the Armis platform. + +:::sumo Best Practice +Armis and Sumo Logic recommend using the Armis SIEM Integration, which pushes logs from Armis to a Sumo Logic HTTP source. There is a known limitation with the Armis API’s time query parameters, which can result in missing logs when using the Cloud-to-Cloud source. To avoid this, we advise using the Armis-side integration instead. +::: ## Data collected @@ -107,4 +110,4 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma :::info Click [here](/docs/c2c/info) for more information about Cloud-to-Cloud sources. -::: \ No newline at end of file +:::