User Profile

PotterOtukile

MCT

Joined May 31, 2021

5 Posts

View All Badges

User Widgets

Recent Discussions

FORTINET DATA CONNECTOR - MICROSOFT SENTINEL
I have configured a Fortinet data connector together with Syslog for my Sentinel. However when I connect it picks up logs for just an hour and it stops. I just also realized that is no longer connected. Previously it had done the same and I had to re-connect only for it to keep behaving the same way. Can I kindly have a permanent workaround.
Apr 20, 2022 Place Azure
1KViews
0likes
0Comments
EXPORTING SYMANTEC LOGS TO SYSLOG SERVER FROM WINDOWS HOST
The host for the Symantec Endpoint Protection is a Windows machine and I'm trying to connect it with a Syslog server which will then ingest to Sentinel. I have tried all methods I know of to no avail. Any workaround?
Feb 03, 2022 Place Azure
724Views
0likes
0Comments
Re: HOW TO CONNECT SYMANTEC ENDPOINT PROTECTION LOGS TO SENTINEL?
Clive_Watson I did manage to make substantial progress on this. But I was wondering if I can put IP addresses instead of server names in the Parser?
Jan 31, 2022 Place Microsoft Sentinel
4.5KViews
0likes
1Comment
Re: HOW TO CONNECT SYMANTEC ENDPOINT PROTECTION LOGS TO SENTINEL?
Clive_Watson There are only 3 connectors from Symantec and SEP is not one of them. When access it from Contect hub,it shows an error since my subscription is a CSP one. Any workaround?
Jan 24, 2022 Place Microsoft Sentinel
4.5KViews
0likes
0Comments
HOW TO CONNECT SYMANTEC ENDPOINT PROTECTION LOGS TO SENTINEL?
Hello ,I have been trying without success to connect SEP logs to Sentinel. So far I have tried ICDx and CEF .Any run down?
Solved
Jan 24, 2022 Place Microsoft Sentinel
4.9KViews
0likes
5Comments

Recent Blog Articles

No content to show