FireSight remote logging

[Maher Shaban]

Hi,

I want to get a copy of the firesight connection events to a remote logging server.

would anybody help with that.?

i need a global configuration, as i have too many access policies and it will take to much time to add log server to this number of access policies.

Thanks,

[Jetsy Mathew]

Hello Maher,

Did you mean that you need to send the only connection events to a remote server ?

Please refer the following link and let me know if you have any questions.

https://www.cisco.com/c/dam/en/us/td/docs/security/firesight/531/PDFs/FireSIGHT-System-eStreamer-Integration-Guide-5-3-1.pdf

Rate if this answer helps you.

Regards

Jetsy 

[Maher Shaban]

Hi Jetsy,

I would be grateful if you point which part in the document will resolve my issue.

Thanks,

Maher

[Jetsy Mathew]

Hello Maher,

Its the complete configuration guide to setup the estreamer server to send the connection events.

Regards

jetsy 

[Maher Shaban]

Hello Jetsy,

Actually, I have archsight installed in my environment.

all I need to do is to send the logs to.

Thanks,

Maher