Sending Connection Events to Syslog server

[mahesh18]

Hi Everyone,

Need to know in Defence center we can send all log messages to syslog server just like we do for Any cisco device.

Is there any way that we can also send Connection and Intrusion events also to Syslog server?

Is this possible?

Also where in Defence center we do the configuration of syslog server?

Regards

Mahesh

[Marvin Rhoads · Accepted solution]

Mahesh,

Please check the FireSIGHT System User Guide, chapter 44. It has a section on "Configuring Syslog Responses".

Here is a screenshot of where you set it up on Intrusion Events:

[mahesh18]

Many thanks Sir

Mahesh