Log Collection Guides for Version 10.6 - Table of Contents

View PDF Log Collection Getting Started The Basics Procedures Step 1. Add Local and Remote Collectors Step 2. Download Latest Content from LIVE Step 3. Set Up a Lockbox Step 4. Configure Collection Protocols and Event Sources Step 5. Start Collection Services and Enable Automatic Start Step 6. Verify That Log Collection Is Working Reference - Configuration Parameters Interface Log Collector Configuration Parameters Interface Log Collection Service System View Interface Troubleshoot Log Collection Log Collection Deployment Guide The Basics Procedures Access Local Collectors and Remote Collectors Configure Local and Remote Collectors Pull Events from Remote Collector Push Events to Local Collectors Configure Failover Local Collector Configure Failover Remote Collector Configure Replication Configure Log Routing for Specific Protocols Configure Chain of Remote Collectors Throttle Remote Collector to Local Collector Bandwidth Reference - Remote/Local Collectors Configuration Parameters Interface Troubleshoot Log Collection Deployment Log Collection Configuration Guide The Basics Procedures Step 1. Download Latest Content from LIVE Step 2. Configure Settings Configure Lockbox Security Settings Configure Certificates Step 3. Configure Event Sources in Security Analytics Add Certificates and Passwords Import, Export, and Edit Event Sources in Bulk Test Event Source Connections in Bulk Configure Syslog Event Sources for Remote Collector Configure Syslog Event Filters for Remote Collector Step 4. Configure the Event Sources to Send Events to Security Analytics Step 5. Start and Stop Services for Configured Protocols Step 6. Verify That Log Collection Is Working Reference - Configuration Parameters Interface Log Collection General Tab Log Collection Event Destinations Tab Log Collection Parameters Log Collection Event Sources Tab Syslog Event Filters View for Remote Collector Syslog Event Source Configuration Parameters for Remote Collector Log Collection Settings Tab Lockbox Configuration Parameters Certificates Configuration Parameters Troubleshoot Log Collection Configuration AWS (CloudTrail) Collection Configuration Guide The Basics Procedures Step 1. Configure AWS (CloudTrail) Event Sources in Security Analytics Step 2. Configure AWS (CloudTrail) Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured AWS (CloudTrail) Collection Protocol Step 4. Verify That AWS (CloudTrail) Collection Is Working References - AWS (CloudTrail) Collection Configuration Parameters Troubleshoot AWS (CloudTrail) Collection Check Point Collection Configuration Guide The Basics Procedures Step 1. Configure Check Point Event Sources to Send Events to Security Analytics Step 2. Configure Check Point Event Sources in Security Analytics Step 3. Start Service for Configured Check Point Collection Protocol Step 4. Verify That Check Point Collection Is Working References - Check Point Collection Configuration Parameters Troubleshoot Check Point Collection File Collection Protocol Configuration Guide The Basics Procedures Step 1. Configure File Event Sources in Security Analytics (Optional) Create Custom Content Typespec for File Collection Step 2. Configure File Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured File Collection Protocol Step 4. Verify That File Collection Is Working References - File Collection Configuration Parameters Troubleshoot File Collection Netflow Collection Configuration Guide The Basics Procedures Step 1. Configure Netflow Event Sources in Security Analytics Step 2. Configure Netflow Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured Netflow Collection Protocol Step 4. Verify That Netflow Collection Is Working References - Netflow Collection Configuration Parameters Troubleshoot Netflow Collection ODBC Collection Configuration Guide The Basics Procedures Step 1. Configure ODBC Event Sources in Security Analytics ODBC Collection: Configure Data Source Names (DSNs) ODBC Collection: Create Custom Content Typespec Step 2. Configure ODBC Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured ODBC Collection Protocol Step 4. Verify That ODBC Collection Is Working References - ODBC Collection Configuration Parameters ODBC Event Source Configuration Parameters ODBC DSNs Event Source Configuration Parameters Troubleshoot ODBC Collection SDEE Collection Configuration Guide The Basics Procedures Step 1. Configure SDEE Event Sources in Security Analytics Step 2. Configure SDEE Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured SDEE Collection Protocol Step 4. Verify That SDEE Collection Is Working Reference - SDEE Event Source Configuration Parameters Troubleshoot SDEE Collection SNMP Collection Configuration Guide The Basics Procedures Step 1. Configure SNMP Event Sources in Security Analytics Step 2. Configure SNMP Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured SNMP Collection Protocol Step 4. Verify That SNMP Collection Is Working References - SNMP Collection Configuration Parameters SNMP Event Source Configuration Parameters SNMP v3 User Manager Configuration Parameters Troubleshoot SNMP Collection VMware Collection Configuration Guide The Basics Procedures Step 1. Configure VMware Event Sources in Security Analytics Step 2. Configure VMware Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured VMware Collection Protocol Step 4. Verify That VMware Collection Is Working References - VMware Event Source Configuration Parameters Troubleshoot VMware Collection Windows Collection Configuration Guide The Basics Procedures Step 1. Configure Windows Event Sources in Security Analytics Step 2. Configure Windows Event Sources to Send Events to Security Analytics Step 3. Start Service for Configured Windows Collection Protocol Step 4. Verify That Windows Collection Is Working References - Windows Collection Configuration Parameters Windows Event Source Configuration Parameters Windows Kerberos Configuration Parameters Troubleshoot Windows Collection Windows Legacy and NetApp Collection Configuration Guide The Basics Procedures Step 1. Set Up Windows Legacy Collector Step 2. Configure Windows Legacy and NetApp Event Sources in Security Analytics Step 3. Start Service for Configured Windows Legacy Collection Protocol Step 4. Verify That Windows Legacy Collection Is Working References - Windows Legacy and NetApp Collection Configuration Parameters Troubleshoot Windows Legacy and NetApp Collection Install and Update the SFTP Agent Configure SFTP Shell Script File Transfer

Log Collection Guides for Version 10.6 - Table of Contents

View PDF

Attachments

Outcomes

Related Content

Recommended Content

Incoming Links