IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: How To Setup Logging Events to a Syslog Server

App Control: How To Setup Logging Events to a Syslog Server

Environment

  • App Control Console: All Supported Versions

Objective

Setup Event Logging to an external syslog application.

Resolution

  1. Prepare the syslog application to ingest App Control event logs. See the Server Documentation > Supported Integrations section of the App Control documentation.
  2. Login to the App Control Console and navigate to: System Configuration > Events > Edit.
  3. In the section, "External Event Logging" check the box, "Syslog Enabled".
  4. Enter the relevant details for the syslog application (Syslog Address, Port, Format, etc).
  5. Click Update > review the changes > click Yes to apply the changes.

Additional Notes

Currently it is not possible to filter the Events sent from App Control. Filtering should be done in the application ingesting the Events.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎12-21-2018
Views:
3979
Contributors