Does anyone have proper document for integration 0f 2003 or early event source using window legacy collector

[Anonymous]

The document i got from RSA knowledgebase does not have any instruction for the integration of window server 2008 after installing window legacy collector.

[RSAAdmin]

Hi Rajveer,

You are correct - this is how the legacy sources must be added in - one for each event source type.

Hopefully this will be improved in future releases by RSA.

[RSAAdmin]

Hi rajveer,

Could you collect the logs?

I cannot see the logs in Investigation tab.

I created an Appliance using the IP Address of the Windows 2008 which is installed the Windows Legacy

I created a Log Collector Service for Windows Legacy.

I created a Event Source for Windows 2003 server.

Follow in attachment some screenshots.

The Legacy Appliance has an error in Updates Column.

Is there any debug that I can run to check if there is some error?

I will be grateful if you can help me.

Regards.

[RSAAdmin]

Hi all,

I could configure with success. Is it necessary to configure a Destination Group in Windows Legacy service.

Regards.

[Anonymous]

Thank you for following up with the solution!

[RSAAdmin]

Hi Rajveer,

You could also try configuration using Windows Snare agent which we are currently using in our environment and seems to be quite easy to deploy.