Get data into Snowflake

Get your data into Snowflake, where it can be used to generate detections on the Anvilogic platform.

Assumptions

This document assumes you have completed the guided onboarding:

• You have defined your company threat profile.

• You have integrated Snowflake as your data repository

Before you continue, make sure you are a user with administrator privileges on the Anvilogic platform.

Data onboarding summary

The following flowchart summarizes the process for getting your data into Snowflake.

Data onboarding steps

Pick one of the following next steps, depending on your infrastructure:

Self-managed pipelines

Before you begin, make sure you read Best practices for Snowflake. This document contains important information for optimizing your data onboarding for the best performance.

After you review the best practices, see Snowflake data ingestion for supported data sources and onboarding instructions for each data source.

Anvilogic-managed pipelines

See Snowflake data ingestion for a list of supported data sources. Click on the name of a data source and follow the instructions to get the data into Snowflake. Anvilogic manages the pipelines for these data sources once you have the data source integrated.

If you have a data source that is not listed here, use Snowflake custom data to get your data in. Cribl Stream is the recommended way to get your data sources into Snowflake. If you don't use Cribl Stream, you can use your own pipelines Forward events to Snowflake.

Next step

Review data feeds