User`s guide

Technical white paper

# What would you like to do?

# Please select one of the following options :

# 0 - Add a Connector(addconnector)

# 1 - Enable FIPS mode(setfipsmode)

containeroperation=addconnector

# =========================================================

# Panel 'connectortype'

# =========================================================

# Select the connector to configure

# Type

connectortype.connectortype=linux_auditd

# =========================================================

# Panel 'connectorparameter'

# =========================================================

# Enter the connector details

# Log File Name

connectorparameter.logfilename=/var/log/audit/audit.log

# =========================================================

# Panel 'connectordestinationtypes'

# =========================================================

# Enter the type of destination

# Please select one of the following options :

# 0 - ArcSight Manager (encrypted)(http)

# 1 - ArcSight Logger SmartMessage (encrypted)(loggersecure)

# 2 - NSP Device Poll Listener(nsp)

# 3 - CEF File(ceffile)

# 4 - CEF Syslog(cefsyslog)

# 5 - CEF Encrypted Syslog (UDP)(encryptedcefsyslog)

# 6 - CSV File(file)

# 7 - Raw Syslog(simplesyslog)

connectordestinationtypes=loggersecure

# =========================================================

# Panel 'connectordestinationnew'

# =========================================================

# Enter the destination parameters

# Host Name/IP

connectordestinationnew.host=192.168.153.159

# Port

connectordestinationnew.port=443

# Receiver Name

connectordestinationnew.rcvrname=Smart

# Compression Mode

# Possible values: [Disabled | Enabled]

connectordestinationnew.compression=Enabled