cancel
Showing results for 
Search instead for 
Did you mean: 
professor_is
Not applicable
Report Inappropriate Content
Message 1 of 4

Microsoft Sharepoint Logs

Dear friends.

Our team has enciuntered with an issue, which is connected with sharepoint logs. What have been done:

1. Created Data Source to accept logs from Sharepoint (screenshot provided below)

sharepoint_data_source.PNG

2. Remotely installed SIEM Collector Application on Windows 2012 Sever and General Configuration Policy was configured (Screenshot provided)

win events.PNGGeneral Configuration For Receiver.PNGFile Tail.PNG

The problem is that Debug logs have not been delievered from indicated path to datasource (receiver). Does anybody encountered and fixed the problem like mine? It seems to me that it's common issue.

3 Replies
penoffd
Not applicable
Report Inappropriate Content
Message 2 of 4

Re: Microsoft Sharepoint Logs

Not to hijack the thread, but you were able to get the collector to run on Windows 2012 Server?  We have been trying to do this for some months without success.

McAfee Employee garethrhys
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Microsoft Sharepoint Logs

Please look at Article in another thread.

You could also look up device support using LOGbinder for SharePoint, SQL, and Exchange which is integrated through SIA partnership.

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/25000/PD25449/en_US/...

Seems to be an issue with the PDF file as I write this - will report.

rmcse04
Not applicable
Report Inappropriate Content
Message 4 of 4

Re: Microsoft Sharepoint Logs

Hi,

We are able to collect SharePoint logs, however unable to get the user name details from the Sharepoint events. i.e. SharePoint's audit log does not provide the names of users or objects. is there a way to fetch the users details or objects?

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.