Previous Topic: Open Integration Wizard

Next Topic: Apply Suppression and Summarization Rules

Add Integration Components

When you can create an integration, you set key integration details, such as the log sensors, XMP files, and DM files that are used to collect events.

To add integration components

  1. Open the integration wizard.
  2. Enter a name for the new integration.
  3. Select the following required integration components from the drop-down lists:
    Sensor

    Defines the log sensor the integration uses to read events from the log source.

    Configuration Helper

    Defines the helper binary the integration uses to connect to the selected log store. Most integrations do not require a configuration helper.

    Platform

    Refers to the operating system the integration agent is able to run on, not the operating system of the application the integration is designed to monitor. The wizard automatically selects the operating system based on your sensor and configuration helper settings.

  4. Type a description for the Integration.
  5. Select the XMP and DM files you want the integration to use to refine events, using the shuttle controls.
  6. If needed, type the name of the native field containing the raw event information you want the integration to parse in the 'target fields' entry field. Some event types contain their raw event information, in one particular field, requiring that the integration is targeted to that field. For example, for NT event log events, this field is named "Message".
  7. Click the appropriate arrow to advance to the wizard step you want to complete next, or click Save and Close.

    If you click Save and Close, the new integration appears in the user folder list, otherwise the step you choose appears.