Integration of ePO with SIEM

[Nabs]

Hello

I am trying to integrate ePO with SIEM and I am trying it out using an evaluation license of the SIEM just to see how it all fits together.

However following the standard steps, I see that the option of adding ePO as a device on SIEM is greyed out (see attached screenshot).

Am I missing something here or its a restriction on the evaluation license?

[lratcliffe · Accepted solution]

This is not a restriction of the trial license.  From the screenshot provided you do not have a Receiver, only an ESM.

ePO needs to be integrated to a Receiver so you must deploy and add a Receiver first (or deploy a combined appliance instead of an ESM only).

[Nabs]

Hello lratcliffe

Yes, infact it was due to the missing receiver.

I wasnt sure and reinstalled the SIEM and with a fresh installation I noticed that the receiver was already there and therefore went on to add the ePO.

Thanks.