Log Collection Event Destinations Tab

Use the Event Destinations tab of the Log Collection service Config view to configure the destination of event data collected by the Log Collector :

  • Log Decoders
  • Identity Feed

Prerequisites

You must implement the following configuration to create an identity feed.

  • A Log Collector service with an Identity Feed Event Processor
  • A Log Collector service with Windows Collection configured and enabled​

Note: See the "Create an Identity Feed" topic in the Live Resource Management Guide for more information on how to create and investigate on an identity feed.

Workflow

This workflow illustrates the basic tasks needed to start collecting events through Log Collection.

netwitness_lcwf.png

What do you want to do?

Role I want to... Documentation

Administrator

Perform basic Log Collection implementation.

Basic Implementation

Administrator

Set up a to maintain lockbox settings.

Set Up a Lockbox

Administrator

Start Log Collection services.

Start Collection Services

Administrator

*Configure Log Collection protocols and event sources.

Configure Collection Protocols and Event Sources

Administrator

Verify that Log Collection is working.

Verify That Log Collection Is Working

*You can perform this task here.

Related Topics

  • See the Create an Identity Feed topic in the Live Resource Management Guide.

Quick Look

The Event Destinations tab of the Log Collection service Config view allows you to configure the destination of event data collected by the Log Collector.

12.1_LCEventDestTb_1122.png

The required permission to access this view is Manage Services.

To access the Event Destinations tab:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services .
  2. Select a Log Collection service.
  3. Select netwitness_ic-actns.png > View > Config to display the Log Collection configuration parameter tabs.
  4. Click the Event Destinations tab.
  5. In the Select Event Destinations drop-down menu:

    • Select Log Decoder to configure Log Decoder destinations for event data collected by the Log Collector.

      Note: You must select a Log Decoder service from the Add Log Decoder Destination dialog, but the remainder of the configuration is done automatically.

    • Select Identity Feed to configure an identity feed destination for event data collected by the Log Collector.

netwitness_event_dest_tab.png

netwitness_event_dest_tab_id_feed.png