This topic describes the user interface for Configuring Windows Legacy Collection.
The Windows Legacy/Windows or Windows Legacy/NetApp options on the Log Collector service Config View > Event Sources tab displays the parameters that you specify to configure Windows Legacy event sources.
To access the Windows Legacy and NetApp Collection Configuration Parameters:
- In the Security Analytics menu, select Administration > Services.
- In the Services grid, select a Log Collector service.
- In the Actions column, select > View > Config, then click the Event Sources tab.
- In the Event Sources tab, select one of the following options from the drop-down menu
- Windows Legacy/Windows
- Windows Legacy/NetApp
The Event Sources tab for Windows Legacy/Windows and Windows Legacy/NetApp has two panels: Event Categories and Sources.
Event Categories Panel
The Event Categories panel lists existing Windows Legacy event source aliases. Use this section to add or delete Windows Legacy event source aliases.
The windows domain, referred to as alias, is the configuration parameter that the Log Collector uses to group event sources. Most often, the alias defines a single domain because credentials (that is username, and password), and event log name are domain‐wide. Occasionally, you need to define multiple alias entries for the same domain if you need to customize the settings for different groups of event sources.
The Sources panel displays a list of existing Windows Legacy event sources. Use this section to add or delete Windows Legacy event sources (that is the windows event source address and associated communication parameters).
The following table provides descriptions of the toolbar options.
Add Source Dialog
In this dialog, you define parameters for a new Windows Legacy event source.