Audit Log syslog

[kotman]

Audit Logs can we have a syslog method? Is there an article with that?

[vivs]

Hello @kotman 

Thanks for your post.

Yes, You can configure a Syslog Server.

Use the below KB article:

https://kc.mcafee.com/corporate/index?page=content&id=KB87927

https://kc.mcafee.com/corporate/index?page=content&id=KB91194

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[kotman]

Hello Vivs,

With syslog, we can send threat logs with event ids. McAfee ePO Audit Logs have no event id. Can we send only audit logs as syslog?

Best Regards

[vivs · Accepted solution]

Hello @kotman 

Thanks for your response.

Audit logs or any other logs are not forwarded by ePO to the Syslog receiver only threat events .

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?