AnsweredAssumed Answered

How can I monitor SCCM 2012 logs with RSA Security Analytic?

Question asked by Clement Chee Seng Lim on Dec 26, 2017
Latest reply on Jan 5, 2018 by Sravan Koneti

We have RSA Virtual Log Collector in our environment we would want to send is  the SCCM log to the VLC. 

What we want to achieve is to collect the Site Server Log --->VLC. (e.g This will enable to alert who push what package to all the server at what time.)

 

We have used the configuration guide that was provided in the RSA supported event, but it is only collecting logs from the event viewer.

 

Below are some of the example of the log we are looking for:

1) CAS.log

2 ) Ccm32BitLauncher.log

3)  CcmEval.log 

Outcomes