topic FireSight remote logging in Network Security

FireSight remote logging

Maher Shaban — Fri, 21 Feb 2020 13:51:12 GMT

Hi,

I want to get a copy of the firesight connection events to a remote logging server.

would anybody help with that.?

i need a global configuration, as i have too many access policies and it will take to much time to add log server to this number of access policies.

Thanks,

Jetsy Mathew — Tue, 21 Jun 2016 04:13:33 GMT

Hello Maher,

Did you mean that you need to send the only connection events to a remote server ?

Please refer the following link and let me know if you have any questions.

https://www.cisco.com/c/dam/en/us/td/docs/security/firesight/531/PDFs/FireSIGHT-System-eStreamer-Integration-Guide-5-3-1.pdf

Rate if this answer helps you.

Regards

Jetsy

Maher Shaban — Tue, 21 Jun 2016 09:01:46 GMT

Hi Jetsy,

I would be grateful if you point which part in the document will resolve my issue.

Thanks,

Maher

Jetsy Mathew — Tue, 21 Jun 2016 14:19:23 GMT

Hello Maher,

Its the complete configuration guide to setup the estreamer server to send the connection events.

Regards

jetsy

Maher Shaban — Wed, 22 Jun 2016 09:25:06 GMT

Hello Jetsy,

Actually, I have archsight installed in my environment.

all I need to do is to send the logs to.

Thanks,

Maher