can we install monitoring agent like splunk on RSA Authentication manager server and IDR

[SandipKandelkar]

can we install monitoring agent like splunk on RSA Authentication manager server and Identity router . if yes how 

[_EricaChalfin]

Sandip Kandelkar‌,

I've moved your question to the RSA SecurID Access" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA SecurID Access" data-type="space‌‌ and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[StevenSpicer]

It's my understanding that, in general, the installation and use of third-party software on the appliances is not supported by RSA. 

AM logs can be forwarded to local syslog or a remote syslog aggregator -- you set this up in the Security Console > System Settings > Logging.  You can even modify the syslog configuration file to forward entries to multiple remote targets. See https://community.rsa.com/docs/DOC-101149 for details.

[DavidAllison]

You can also use SNMP; between that and SIEMS you should have all the monitoring you could ever want.