ODBC Collection: The Basics

Document created by RSA Information Design and Development Employee on Jul 23, 2016Last modified by RSA Information Design and Development Employee on Sep 14, 2016
Version 4Show Document
  • View in full screen mode


This guide tells you how to configure ODBC collection protocol which collects events from event sources that store audit data in a database using the Open Database Connectivity (ODBC) software interface.

Deployment Scenario

The following figure illustrates how you deploy the ODBC Collection Protocol in Security Analytics.



Configure ODBC Collection Protocol in Security Analytics

You configure the Log Collector to use ODBC collection for an event source in the event Source tab of the Log Collector parameter view. The following procedure explains the basic workflow for configuring an event source for ODBC Collection in Security Analytics. Please refer to:

To configure the Log Collector to use ODBC collection protocol:

  1. In the Security Analytics menu, select Administration > Services.
  2. In the Services grid, select a Log Collection service.
  3. SelectActions menu cropped > View > Config to display the Log Collection configuration parameter tabs.
  4. In the Event Sources tab, select ODBC as the collection protocol and select Config.
  5. Click Icon-Add.png and select an event source category (for example, mssql).
  6. The event source category is part of the content you downloaded from LIVE.
  7. Select DSNs from the drop-down and click Icon-Add.png.
  8. Select a DSN value pair template, enter a DSN name, and add or delete value pairs if required.
    If required, click ManageDSNTemplatesBTN.PNG to add or delete DSN templates.
  9. Select Config.
  10. Select the ODBC category and click Icon-Add.png in the Sources panel.
  11. Specify the basic parameters required for the ODBC event source.
  12. Click AdvcdExpandBtn.PNG and specify additional parameters that enhance how the ODBC protocol handles event collection for the event source.

Configure Event Sources to Use ODBC Collection Protocol

You need to configure each event source that uses the ODBC Collection protocol to communicate with Security Analytics (see Step 2. Configure ODBC Event Sources to Send Events to Security Analytics ).

You are here: ODBC Collection Configuration Guide > The Basics