06-20-2016 03:31 AM - edited 02-21-2020 05:51 AM
Hi,
I want to get a copy of the firesight connection events to a remote logging server.
would anybody help with that.?
i need a global configuration, as i have too many access policies and it will take to much time to add log server to this number of access policies.
Thanks,
06-20-2016 09:13 PM
Hello Maher,
Did you mean that you need to send the only connection events to a remote server ?
Please refer the following link and let me know if you have any questions.
https://www.cisco.com/c/dam/en/us/td/docs/security/firesight/531/PDFs/FireSIGHT-System-eStreamer-Integration-Guide-5-3-1.pdf
Rate if this answer helps you.
Regards
Jetsy
06-21-2016 02:01 AM
Hi Jetsy,
I would be grateful if you point which part in the document will resolve my issue.
Thanks,
Maher
06-21-2016 07:19 AM
Hello Maher,
Its the complete configuration guide to setup the estreamer server to send the connection events.
Regards
jetsy
06-22-2016 02:25 AM
Hello Jetsy,
Actually, I have archsight installed in my environment.
all I need to do is to send the logs to.
Thanks,
Maher
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide