ODBC Collection: Step 2. Configure Event Sources to Send Events

Document created by RSA Information Design and Development on Jul 23, 2016Last modified by RSA Information Design and Development on Sep 14, 2016
Version 4Show Document
  • View in full screen mode
 

This topic tells you where to find the event sources currently supported for ODBC collection and the available configuration instructions for each event source.

You may need to view the event sources currently supported for ODBC collection, as well as the available configuration instructions for each event source. The Supported Event Sources list provides information on which event sources are currently available for ODBC collection.

Procedure

Return to Procedures

The list of RSA Supported Event Sources is an alphabetized of all the event sources currently supported by Security Analytics that identifies which event sources you can use with ODBC Collection. To verify that the event source is supported:

  1. In the Security Analytics menu, select Administration > Services
  2. In the Services grid, select a Log Decoder and click Actions menu cropped > View > Config.
    The Services Config view is displayed with the General tab open.
  3. In the General tab, under the Service Parsers Configuration panel, find the name of the event source.
  4. Verify that it is supported by the ODBC Collection protocol. Click on yellow-book.png in the Supported Event Sources list to display the configuration instructions for the event source.
  5. Verify that you downloaded the correct event source parser (for example, mssql) from Live to the Log Decoder and enabled it.

Sample Configuration Instructions

The following illustration is taken from the ODBC Security Suite, IPS-1 configuration instructions.

SampleODBCConfigInstr.PNG

You are here: ODBC Collection Configuration Guide > Procedures > Step 2. Configure ODBC Event Sources to Send Events to Security Analytics

Attachments

    Outcomes