This topic tells you how to configure the Azure collection protocol. Microsoft Azure is a cloud computing platform and infrastructure for building, deploying, and managing applications and services through a global network of Microsoft-managed data centers.
Configuration in NetWitness Suite
For complete details about configuring Azure as an event source, see the Azure Event Source Configuration Guide, available on RSA Link.
To configure an Azure Event Source:
- Go to ADMIN> Services from the NetWitness Suite menu.
- Select a Log Collection service.
- Under Actions, select > View > Config to display the Log Collection configuration parameter tabs.
Click the Event Sources tab.
- In the Event Sources tab, select Plugins/Config from the drop-down menu.
The Available Event Source Types dialog is displayed.
Select azureaudit) and click OK.
The newly added event source type is displayed in the Event Categories panel.
The Add Source dialog is displayed.
- Define parameter values. For details, see Configure Azure Event Sources in NetWitness Suite below.
Click Test Connection.
The result of the test is displayed in the dialog box. If the test is unsuccessful, edit the device or service information and retry.
Log Collectortakes approximately 60 seconds to return the test results. If it exceeds the time limit, the test times out and the NetWitness Suite displays an error message.
If the test is successful, click OK.
The new event source is displayed in the Sources panel.
This section describes the Azure event source configuration parameters.