Endpoint Log Hybrid - Only for Endpoint Agent Data?

[Anonymous]

Should an Endpoint Log Hybrid server just be used for Endpoint Agent Data as best practice? Or can it also be used for other log sources?

Our Endpoint Log Hybrid collects agent data from Endpoints, Logs forwarded (ie. event logs), ODBC, Firewalls sending via Syslog, VPN Concentrator and others. Should the ELH just collect the Endpoint Agent data and then another Log Decoder/Concentrator be used for everything else?

[DaveGlover · Accepted solution]

The Endpoint Log Hybrid can be used for any and all log collections.  You just need to make sure your EPS and data volumes are within reason for an EndPoint Log Hybrid 

[Anonymous]

Thanks Dave, I thought that was the case but was seeing documentation with diagrams that seems to suggest otherwise.