cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Chris6
Level 7
Report Inappropriate Content
Message 1 of 3

Pulling Log data from REST Service

Jump to solution

My company writes a custom app that has a REST web-service with log data that I want to show up in our ELM. I attempted to do this using the generic HTTP data-source with out success. Does anyone know if there is a way to do this?

1 Solution

Accepted Solutions
Chris6
Level 7
Report Inappropriate Content
Message 3 of 3

Re: Pulling Log data from REST Service

Jump to solution

I actual ended up writing a method that allows me to send to a generic datasoure using syslog and JSON objects to directly feed the logs to the ELM. The ELM is able to parse the JSON pretty easily.  So far so good. Thanks.

2 Replies
Reliable Contributor brenta
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: Pulling Log data from REST Service

Jump to solution

You will need to have an application connect to this endpoint, and then send this data to the SIEM. Often syslog is the best format. After that you will need to create a custom parser for this data.

Brent
Chris6
Level 7
Report Inappropriate Content
Message 3 of 3

Re: Pulling Log data from REST Service

Jump to solution

I actual ended up writing a method that allows me to send to a generic datasoure using syslog and JSON objects to directly feed the logs to the ELM. The ELM is able to parse the JSON pretty easily.  So far so good. Thanks.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator