Quantcast
Channel: THWACK: Popular Discussions - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5911

FireEye MPS Connector

$
0
0

Greetings,

 

Does anyone know how to configure FireEye MPS and the LEM connector to talk?  We configured FireEye by enabling rsyslog, checking all events, pointing to LEM IP, and enabling.  We configured LEM FireEye connector with defaults (/var/log/syslog).  Adding new node doesn't discover it and there's not a connectivity issue.  Is /var/log/syslog the correct log to read?

 

Thanks in advance.

 

-Steve

 

Message was edited by: Steve Goldberg Nevermind... got advice to check cmc logs and found where the log data was going.  Configured connector accordingly and manually added node; just had to select All Vendors even though it was FireEye.  All Vendors saw it as Riverbed WAN Optimization Appliance.


Viewing all articles
Browse latest Browse all 5911

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>