Security Management

Expand all | Collapse all

NSM 2011.1 sending syslog to RSA envision

Jump to Best Answer
  • 1.  NSM 2011.1 sending syslog to RSA envision

    Posted 07-26-2011 07:21

    Hi All,

     

    Have you ever worked on  forwarding syslog from NSM 2011.1 to RSA envision appliance? I wondering how to forward these syslogs to the RSA envision?



  • 2.  RE: NSM 2011.1 sending syslog to RSA envision
    Best Answer

    Posted 07-27-2011 00:43

    Hi

     

    Under the administer section in the left side pane you choose "Action Manager".

     

    First configure your RSA Envision as a syslog server under "Action Parameters".

     

    Then you configure which logs you want to forward under "Device Log Action Criteria"

     

     



  • 3.  RE: NSM 2011.1 sending syslog to RSA envision

    Posted 07-28-2011 01:38

    Thanks!  But how to config sending IDP logs  under device log action criteria? Under Info category?



  • 4.  RE: NSM 2011.1 sending syslog to RSA envision

    Posted 08-01-2011 05:49

    Hi

     

    I think you can achieve that by selecting "predefined" as category.

     

    I dont' myself use NSM to forward logs to STRM. I chose to log directly from the end-device to STRM.