000039186 - How to send test incident using Syslog from UCF to RSA Archer

Document created by RSA Customer Support Employee on Jul 30, 2020
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000039186
Applies ToRSA Product Set: Archer
RSA Product/Service Type: UCF
RSA Version/Condition: Archer 6.x, SecOps 1.3
Platform: Windows
IssueHow to send incidents to Archer using Syslog for testing.
Resolution
  1. On the UCF server, open the Connection Manager.
  2. Open a command prompt.
  3. Change directories to \SA IM integration service\data-collector.
  4. Enter runConnectionManager.bat.
  5. In the Connection Manager, enter 10 for "Test Syslog Client".
  6. Enter 1 for "Secure TCP:1515".
  7. Enter the directory path where the raw alert test file is located.
  8. Confirm that the incident is sent successfully to Archer.

Attachments

    Outcomes