I have got Graylog2 server which is going to resend pre-selected logs from many log sources McAfee Event Receiver.
Problem is that I do not have any idea how to setup in on McAfee site.
Shall I add each log source seperatly and select syslog relay option?
Shall I add Relay Server first as a log source and then somehow add log sources which are sending data to this Relay server?
Can you help me with it, pls?
Solved! Go to Solution.
Hi Vinaya, I hope you are still active on this forum.
I was following the document shared by you but didn't find "syslog" data source under " Data Source Vendor". Is this option no more available in new releases.I am using 9.6.x.Please suggest.