Custom Log Collection Content in SA

[MitchHanks]

This post will be a series of How-To videos and supporting documents on creating custom content for unsupported log event sources in SA.  This will include writing custom File/ODBC typespecs, SNMP transforms, etc.  The work of producing this content will be on-going, so I will be updating this post with new content as I have it available.  See the attachments to this post for related files.

Video 1:  Creating a Custom ODBC or File Typespec for Log Collection

Video 2:  Extracting Contents of SNMP Traps from a PCAP

[SoumyajitDhara]

Can we get same like for SDEE Collection

[MitchHanks]

Let me try to set up some scenarios for SDEE collection in my lab so I can get some examples how one might customize this type of collection.  Once I can come up with an example I would be happy to post some instruction on it.

[SoumyajitDhara]

Excellent, will wait for that.

[HongtaeJin]

Any update?

[MitchHanks]

I'm assuming you're asking about the SDEE video.  If so, I'm sorry it's taking a while.  I was already committed to do videos on ODBC, File and SNMP.  I will make this my next priority.  Just having to juggle this effort with my 9-5 (and my "dad") responsibilities