can we install monitoring agent like splunk on RSA Authentication manager server and Identity router . if yes how
can we install monitoring agent like splunk on RSA Authentication manager server and Identity router . if yes how
It's my understanding that, in general, the installation and use of third-party software on the appliances is not supported by RSA.
AM logs can be forwarded to local syslog or a remote syslog aggregator -- you set this up in the Security Console > System Settings > Logging. You can even modify the syslog configuration file to forward entries to multiple remote targets. See 000037206 - How to configure RSA Authentication Manager 8.4 or later to send data to multiple remote syslog servers for details.
You can also use SNMP; between that and SIEMS you should have all the monitoring you could ever want.
Sandip Kandelkar,
I've moved your question to the RSA SecurID Access space where it will be seen by the product's support engineers, other customers and partners. Please bookmark this page and use it when you have product-specific questions.
Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question. From there, scroll to RSA SecurID Access and click Ask A Question. That way your question will appear in the correct space.
Regards,
Erica