Print Download PDF Send Feedback

Previous

Next

Basic Deployment

Common method for creating \ modifying log exporters \ targets.

To configure a new target for the logs:

  1. On the log server, run:

    cp_log_export add name <name> [domain-server <domain-server>] target-server <target-server> target-port <target-port> protocol <(udp|tcp)> format <(syslog)|(cef)> [optional arguments]

  2. On Multi-Domain Server / Multi-Domain Log Server: The domain-server argument is mandatory. You can use mds as the value for the domain-server to export Multi-Domain Server level audit logs
  3. This creates a new target directory with the unique name specified in the –n parameter under $EXPORTERDIR/targets/<deployment_name>.
  4. Set the target configuration parameters with the connection details:
    • IP Address
    • Port
    • Protocol

    Note - This deployment exports the logs in clear text.

Unless apply-now is used within the command, the new Log Exporter does not start automatically and requires a manual start command.

For information on how to send the logs over an encrypted connection, see TLS Configuration.