We want to fetch ESM (9.6.0) events & logs from a custom application. Is there a way to integrate with ESM via REST, web services or CLI?
Thanks in advance
Go to Solution.
Yes, there is an API, see here for help:
Substitute the FQDN of you SIEM in this URL. Not sure if it will meet your needs.
If you are going to go to the trouble of writing custom code it would probably be cleaner to use the supplied data source interfaces in association with a custom parser.
View solution in original post
thank you so much, thats what we looking for
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC