ODBC Collection: The Basics

Document created by RSA Information Design and Development on Mar 23, 2017Last modified by RSA Information Design and Development on May 4, 2017
Version 4Show Document
  • View in full screen mode
  

Overview

This guide tells you how to configure ODBC collection protocol which collects events from event sources that store audit data in a database using the Open Database Connectivity (ODBC) software interface.

Deployment Scenario

The following figure illustrates how you deploy the ODBC Collection Protocol in Security Analytics.

ODBC_Deployment.png

Procedures

Configure ODBC Collection Protocol in Security Analytics

You configure the Log Collector to use ODBC collection for an event source in the event Source tab of the Log Collector parameter view. The following procedure explains the basic workflow for configuring an event source for ODBC Collection in Security Analytics. Please refer to:

To configure the Log Collector to use ODBC collection protocol:

  1. In the Security Analytics menu, select Administration > Services.
  2. In the Services grid, select a Log Collection service.
  3. SelectActions menu cropped > View > Config to display the Log Collection configuration parameter tabs.
  4. In the Event Sources tab, select ODBC as the collection protocol and select Config.
  5. Click Icon-Add.png and select an event source category (for example, mssql).
  6. The event source category is part of the content you downloaded from LIVE.
  7. Select DSNs from the drop-down and click Icon-Add.png.
  8. Select a DSN value pair template, enter a DSN name, and add or delete value pairs if required.
    If required, click ManageDSNTemplatesBTN.PNG to add or delete DSN templates.
  9. Select Config.
  10. Select the ODBC category and click Icon-Add.png in the Sources panel.
  11. Specify the basic parameters required for the ODBC event source.
  12. Click AdvcdExpandBtn.PNG and specify additional parameters that enhance how the ODBC protocol handles event collection for the event source.

Configure Event Sources to Use ODBC Collection Protocol

You need to configure each event source that uses the ODBC Collection protocol to communicate with Security Analytics (see Step 2. Configure ODBC Event Sources to Send Events to Security Analytics ).

Next Topic:Procedures
You are here
Table of Contents > ODBC Collection Configuration Guide > The Basics

Attachments

    Outcomes