cancel
Showing results for 
Search instead for 
Did you mean: 
haaris
Level 10

CEF Format log compatibility with Webreporter

Jump to solution

Hi,

As per the requirement we have to use the CEF format log as Syslog server can read only those format logs.I have got the rulesets from Content security portal.What I would like to know is that if we can push those CEF format logs on webreporter or not???Also if we will be able to push the logs then what about the older logs on webreporter which are not in CEF format.

Please reply if anybody have an idea

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: CEF Format log compatibility with Webreporter

Jump to solution

Hi Haaris,

Web Reporter doesnt know how to parse CEF, so it wont work.

If you still want to write the CEF based log format to a log, you can. In this case you will need two logs plus syslogging.

Best Regards,

Jon

0 Kudos
5 Replies
McAfee Employee

Re: CEF Format log compatibility with Webreporter

Jump to solution

Hi Haaris,

It doesnt matter if Web Reporter supports CEF. You can send Web Reporter the default log format (via log push), and you can send your CEF format to your syslog server (via.... syslog).

You are not constrained to a single log format with MWG, for that matter you are not constrained to a single reporting solution either.

Best Regards,

Jon

0 Kudos
haaris
Level 10

Re: CEF Format log compatibility with Webreporter

Jump to solution

Thats Ok..But if we want to use only CEF format logs for webreporter and webgateway

0 Kudos
McAfee Employee

Re: CEF Format log compatibility with Webreporter

Jump to solution

Hi Haaris,

Web Reporter doesnt know how to parse CEF, so it wont work.

If you still want to write the CEF based log format to a log, you can. In this case you will need two logs plus syslogging.

Best Regards,

Jon

0 Kudos
haaris
Level 10

Re: CEF Format log compatibility with Webreporter

Jump to solution

thanks  a lot Jon...

I tried today and we reporter failed to parse the CEF format logs

0 Kudos
McAfee Employee

Re: CEF Format log compatibility with Webreporter

Jump to solution

Hi Haaris,

Thats a correct observation as I mentioned

Best Regards,

Jon

0 Kudos