Symantec AV

[Mike Riforgiate]

To export log data to a Syslog server

1. In the console, click Admin.

2. Click Servers.

3. Click the local site or remote site that you want to export log data from.

4. Click Configure External Logging.

5. On the General tab, in the Update Frequency list box, select how often to send the log data to the file.

6. In the Master Logging Server list box, select the management server to send the logs to.

7. Check Enable Transmission of Logs to a Syslog Server.

8. Provide the following information:

   • Syslog Server

     Type the IP address of WitFoo appliance

   • Destination Port

     Use 514/tcp

   • Log Facility

     Use 0

9. On the Log Filter tab, check which logs to export.

10. Click OK.

11. Flip back over to the WitFoo “Search” interface and search for the IP address of the McAfee ePO server. An entry should be listed on the Syslog tab.

    Reference: https://support.symantec.com/en_US/article.HOWTO81169.html

[Author]

Posts