7 Replies Latest reply on May 24, 2017 8:58 AM by andy777

    How to configure Exchange 2010 Message Tracking as Data Source

      Hello,

       

      anybody has experience in collecting Message Tracking logs to SIEM (McAfeee ESM 9.3.1)?

       

      I have two questions:

       

      1. User guide says to give network share read privileges to domain user but doesn't say how to configure data source in Add Data Source window on ESM side.

      2. Since we have 3 mail servers how should we collect logs from all three shared folders?

       

      Best regards,