Currently the customer log sources are first sending the logs to a Kiwi
syslog forwarder, before forwarding the logs to the VLC. At the SA Head
UI, the logs being seen are all via one device ip. The analysts are
creating correlation rules based on ev...
We have RSA Virtual Log Collector in our environment we would want to
send is the SCCM log to the VLC. What we want to achieve is to collect
the Site Server Log --->VLC. (e.g This will enable to alert who push
what package to all the server at what t...
Are we able to configure the Virtual Decoders to send to the data diodes
via multiple destination port numbers?Example: 1) IP : 192.168.100.10
port 514 2) IP : 192.168.100.10 port 515 3) IP : 192.168.100.10 port
516All events are send as syslog
Hi All, Currently my SA setup is as per below: Virtual Decoder ---->
Physical Decoder I would need to change to the following: Virtual
Decoder ----> Data Diode -----> Physical Decoder Where do i go to
perform the change to point the Virtual Decoder t...
Hi Saket, The customer want to consolidate all the event and use a
single point to send it to the VLC. Then if i need to do grouping base
on device group I cannot use the source device/ or source IP?
Hi Dave, My Data Flow is VLC -> Virtual Log Decoder -> Data diode ->
Physical Log Decoder ->Concentrator. The Data Diode is use to force data
to go in one direction only. Or are you able to advise where do i go to
change the configuration of the VLC ...
