Cicso Meraki

%3CLINGO-SUB%20id%3D%22lingo-sub-1358276%22%20slang%3D%22en-US%22%3ECicso%20Meraki%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1358276%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Experts%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20struggling%20a%20bit%20here.%26nbsp%3B%20So%20I%20have%20added%20the%20Syslog%20server%20info%20to%20our%20Meraki%20firewalls%20to%20send%20URLs%20and%20Security%20Events.%26nbsp%3B%20We%20have%20a%20CENTOS%20installed%20on%20Azure%20VM.%26nbsp%3B%20I%20can%20see%20the%20data%20coming%20in%20on%20port%20514%2C%20however%2C%20the%20data%20is%20not%20showing%20up%20on%20Sentinel.%26nbsp%3B%20I%20have%20it%20connected%20on%20the%20Data%20Connector%2C%20but%20no%20data%20is%20coming%20in.%26nbsp%3B%20Probably%20a%20step%20I%20am%20missing.%26nbsp%3B%20Any%20help%20would%20be%20greatly%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Visitor

Hello Experts

 

I am struggling a bit here.  So I have added the Syslog server info to our Meraki firewalls to send URLs and Security Events.  We have a CENTOS installed on Azure VM.  I can see the data coming in on port 514, however, the data is not showing up on Sentinel.  I have it connected on the Data Connector, but no data is coming in.  Probably a step I am missing.  Any help would be greatly appreciated.

1 Reply
Highlighted

@ksstormhunter How long ago did you set this up.  It may take a little while for the data to start showing up.

 

Another thing to check is to make sure the outgoing port is open in your firewall (as I know from personal experience).