Ramifications of setting up a Lockbox after events sources have been added in 10.5.X?

[JohnTyson1]

Do any of you know what would happen if I set up the lockbox after event sources were added?  What is the recommended action to configure a lock box after event sources have been added? 

[DeepanshuSood1 · Accepted solution]

The event sources which were unable to get configured because of the lockbox prerequisites, will now start getting integrated and added on the log decoder like Windows sql checkpoint etc..

It's always better to do the lockbox configuration before you start working on the event sources integration.

Get Outlook for Android<http://aka.ms/ghei36>

[JohnTyson1]

Would anything happen to the event sources which are already configured?

[DeepanshuSood1]

May i know which type of collection event sources are already configured?

Get Outlook for Android<http://aka.ms/ghei36>

[JohnTyson1]

Various Unix and Windows event sources at this time.

[JohnTyson1]

You know what I was confusing myself, there are not any Event Sources configured other than the Syslog event sources.  I gues it wouldn't impact those.   

[DeepanshuSood1]

You got it right..without configuring the lockbox password you wouldn't be able to configure the other kinds of collections except syslog and snmp.

It wouldn't be impacted.

Get Outlook for Android<http://aka.ms/ghei36>