06-20-2016 03:31 AM - edited 02-21-2020 05:51 AM
Hi,
I want to get a copy of the firesight connection events to a remote logging server.
would anybody help with that.?
i need a global configuration, as i have too many access policies and it will take to much time to add log server to this number of access policies.
Thanks,
06-20-2016 09:13 PM
Hello Maher,
Did you mean that you need to send the only connection events to a remote server ?
Please refer the following link and let me know if you have any questions.
https://www.cisco.com/c/dam/en/us/td/docs/security/firesight/531/PDFs/FireSIGHT-System-eStreamer-Integration-Guide-5-3-1.pdf
Rate if this answer helps you.
Regards
Jetsy
06-21-2016 02:01 AM
Hi Jetsy,
I would be grateful if you point which part in the document will resolve my issue.
Thanks,
Maher
06-21-2016 07:19 AM
Hello Maher,
Its the complete configuration guide to setup the estreamer server to send the connection events.
Regards
jetsy
06-22-2016 02:25 AM
Hello Jetsy,
Actually, I have archsight installed in my environment.
all I need to do is to send the logs to.
Thanks,
Maher
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: