9 Replies Latest reply on Oct 15, 2013 8:47 AM by uzanatta

    UNIX (AIX) Servers collected

    wpardew1

      Hello All,

       

      I'm looking to set up all of our UNIX (AIX) servers (OS levels 6.1 and 7.1) to have their syslogs and Audit events collected by McAfee.  I can get the syslog data sent over by configuring the /etc/syslog.conf, but I'm having a problem with determining the best way to collect the Audit events.   I'm aware of the Edit Data Source and using SFTP File Source for a given server but that does NOT seem to be working.  Has anybody done this and if you could tell how you did it it would much appreciated?  

       

      Thanks much