Log Collection VMware: Step 1: Configure VMware Event Sources in Security Analytics

Document created by RSA Information Design and Development on Jul 29, 2016
Version 1Show Document
  • View in full screen mode
 

After completing this procedure, you will have...

  • Configured a VMware event source.
  • Modified a VMware event source.

Return to Procedures

Configure a VMware Event Source

  1. In the Security Analytics menu, select Administration >Services.
  2. In the Services grid, select a Log Collector service.
  3. Click AdvcdExpandBtn.PNGunder Actions and select View > Config.
  4. In the Event Sources tab, select VMware/Config from the drop-down menu.
    The Event Categories panel displays the VMware event sources that are configured, if any.
  5. In the Event Categories panel toolbar, click Icon-Add.png.
    VMESType.png
    The newly added event source type is displayed in the Event Categories panel.
  6. Select the new type in the Event Categories panel and click Icon-Add.png in the Sources toolbar.
    The Add Source dialog is displayed.
  7. Add a Name, Username and Password, modify any other parameters that require changes, and click OK.

Caution: If you need to enter the domain name as part of the Username, you must use a double-backslash as a separator. For example, if the domain|username is corp\smithj, you must specify corp\\smithj.

VMAddSrc.png
The new event source is displayed in the list.

Modify a VMware Event Source

  1. In the Security Analytics menu, select Administration >Services.
  2. In the Services grid, select a Log Collector service.
  3. Click AdvcdExpandBtn.PNGunder Actions and select View > Config.
  4. Select VMware/Config from the drop-down menu.
  5. In the Event Source list, select an event source and click icon-edit.png.
    The Edit Source dialog is displayed.
    VMEditSrc.png
  6. Modify the parameters that require changes and click OK.
    Security Analytics applies the parameter changes to the selected event source.

Parameters

References - VMware Event Source Configuration Parameters

You are here: VMware Collection Configuration Guide > Procedures > Log Collection VMware: Step 1: Configure VMware Event Sources in Security Analytics

Attachments

    Outcomes