Can we integrate Logrhythm alerts with RSA Netwitness.

[ArunaJ]

HI, What is the process to integrate LogRhythm alerts to RSA Netwitness.Pease share any related docuemnts if we have.

[EricPartington]

What format do the alerts come in?

Syslog CEF?

Do you have sample alerts that you can share?

[ArunaJ]

Hi,

Through SNMP we are planning to get Logrhythm alerts.

Regards,

Aruna.

[EricPartington]

You will have to test out what those SNMP alerts look  like and use the Log COllector to capture them and transform them into NetWitness events.  Any reason why syslog output cannot be used (CEF)?