Previous Topic: Set WinRM Linux Configurations

Next Topic: How to Create a Syslog Listener

Set SDEE Configurations

You can control data access settings for integrations using the SDEE log sensor. You can use the CA-provided default settings for most event collection purposes, but you can alter these settings for custom integrations.

To set SDEE configurations

  1. Open the integration wizard, select the SDEE log sensor type, and advance to the Default Configurations step.
  2. Set or edit the following configuration values for the targeted event source:
    SDEE Server Address

    Specifies the IP address or DNS name of the server from which you want to extract events.

    SDEE Server Port Number

    Specifies an HTTP port number to access the SDEE server, if you use a port other than the default 433.

    SDEE Server Login ID

    Specifies a username required to log in to the target SDEE server.

    SDEE Sensor Password

    Specifies the password of the user specified in SDEE Server Login ID.

    PollingInterval

    Specifies a time interval at which you want to poll the SDEE server for events.

    Maximum Events

    Specifies the batch size of the events retrieved from the SDEE server.

    Note: We recommend a batch size range 100–500.

    Event Logname

    Specifies the log name from which you want to extract events.

    Connection Timeout

    Specifies, in minutes, the time after which an inactive connection is terminated.

  3. Select the types of events you want to extract using the event type check boxes. The following event categories are available:

    Select the check box for a given event to extract that event type