Can I use passive identity syslog provider as profile data or triggering profiling action

[mike.ng@morganstanley.com]

Studying the potential use case of deploying passive ID syslog parser for our DHCP and AD logs. Can we use logs parsed by the syslog provider as profiling data (e.g. if we have DHCP attributes logged in the DHCP logs) or trigger profiling action (e.g. NMAP)?

[Timothy Abbott · Accepted solution]

Hi Mike,

Unfortunately, this is not supported today.  The syslog parser (today) is mean solely for gleaning identity information from syslog messages.

Regards,

-Tim