Can we transfer specific device logs from DECODER to remote VLC ?

[sachinsahu]

Hi All,

there is new requirement, we want transfer logs of some devices, from decoder to any other remote VLC which will be not part of our network for further analysis.

If yes then kindly suggest how we can configure this?

[SravanKoneti1]

Hi Sachin,

I believe, syslog forwarding option may help here. Tryhttps://community.rsa.com/docs/DOC-78052 

[AnilPrabhakar]

HI Srava,

Thanks for reply.

It is possible to forward  the logs of specific devices to remote VLC? instead of all devices's logs.

[SravanKoneti1]

Hi Anil,

Try this sample App rule, for windows device logs.Same applicable for any device type.

Example 2, rule="device.type='winevent_nic'" name=receiver1