KB87927 is out-of-date and no longer useful - has anyone successfully set up an ELK Stack for syslog

[smacfar]

Hello,

KB87927 (to me) seems to refer to maybe a pre-packaged Bitnami ELK Stack for Windows but it looks like they've stopped publishing the Windows version and instead are providing ready-made Debian VMs.

Seems possible to spin up the Debian VM and get the Bitnami ELK software running there but I'm having a tough time getting the communication secured and the instructions provided by KB87927 seem like they're written for the ELK stack to be running on the ePO server itself.

Has anyone gotten this work work and, if so, would you be willing to share your details with me?

Kind regards,

Steve

[LKS]

Hi smacfar,

Am checking this internally and update you shortly.

[LKS]

Hi smacfar,

The respective teams are working on to rewrite the article with latest update. 

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[Gowtham_SBA]

Hi Team,

Any update on the document part to integrate elk with EPO. 

Please reply. 

Thanks,

Gowtham.E

[cdinet]

This was re-published about 7 days ago with some edits.  What isn't working regarding the KB?  You also need to take into consideration tls requirements.

https://kc.mcafee.com/agent/index?page=content&id=KB91194