Follow

Send Syslog to Kafka

To configure browse to Settings - Notifications - Kafka

Screen_Shot_2019-01-10_at_3.27.30_PM.png

Enter the destination IP or DNS name and port of Kafka bootstrap server(s)

  • Kafka has one (or more) designated bootstrap servers that will initiate the connection
  • Format is destination:port
  • Multiple bootstrap brokers may be entered in this box

Select a protocol:

  • SSL
  • TCP

Upload your CA Certificate, Client Certificate and Client key (all required)

  • CA certificate
    • Must be in unencrypted PEM, x.509 format
  • Client Certificate
    • Must be in unencrypted PEM, x.509 format
    • Must be signed by CA certificate
  • Client Key
    • Must be in unencrypted PEM, x.509 format
    • Must match Client Certificate

Select a Log Topic type:

  • Common topic for all log types
    • Must specify a topic name
    • No spaces or special characters allowed
  • Unique topic name each log type

Select a Format:

  • Standard
  • CEF

Select any combination of Log Types:

  • Campaigns
  • Detections
  • Hosts
  • Audit logs
  • System health

Click Save

Wait approximately one minute for internal services to start up.

Click Test icon at far right of Kakfa table row. 

Screen_Shot_2019-01-10_at_2.48.29_PM.png

A test message for every configured log type will be sent to the destination should now be visible in your Kakfa consumer.

Was this article helpful?
0 out of 0 found this helpful

Download PDF

Have more questions? Submit a request

0 Comments

Article is closed for comments.