Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Trying to set up forwarding of logs in a dedicated Repository to the SIEM solution
설명
Can a collection in Deployment Manager be configured to forward logs gathered by a traditional gathering task/job and kept in a dedicated Repository? Repository Viewer confirms that the dedicated Repository has the logs but cannot get these logs to be forwarded to a SIEM solution.
원인
Forwarding function does not work with traditional gathering, only with real-time gathering, so only real-time collections will be forwarded to a SIEM solution.
해결 방안
Configure the gathering and forwarding process using a Real-Time Collection and a dedicated Repository in Deployment Manager.