Slightly odd topic, is any one pulling data out of Kronos with Cribl currently?
I've not heard of anyone doing it. Happy to collab on this. (And i'd like to harvest the configs for future goats' use)
<@ULBGHDPNY>, sounds good. I currently don't have backend access to our Kronos instance. As soon as I figure that part out I'll reach out. I'd love to get a pack put together for Kronos if it makes sense. Particularly I'm trying to pull Names, Managers, and Titles our of Kronos to use in AD (which can then be forwarded into our SIEM)