Snort 2.8.5.1

[RSAAdmin]

Hi all,

Any ideas how to configure snort to send events to envision. I read the pdf but all it says is to add auth.* to syslog.conf and use @x.x.x.x. 

Thanks

[RSAAdmin]

Hi,

You also need to configure Snort to output syslog.  You can find that configuration information in this document: https://knowledge.rsasecurity.com/docs/rsa_env/device_config/SNORT.pdf

Cheers.