Any ideas how to configure snort to send events to envision. I read the pdf but all it says is to add auth.* to syslog.conf and use @x.x.x.x.
You also need to configure Snort to output syslog. You can find that configuration information in this document: https://knowledge.rsasecurity.com/docs/rsa_env/device_config/SNORT.pdf
Retrieving data ...