Examples › Examples › Syslog Event Forwarding

Syslog Event Forwarding

You can forward incoming CA User Activity Reporting Module events to other collection systems or applications using the syslog protocol.

Setting syslog Event Forwarding

Problem:

You need to transmit certain incoming events to ArcSight ESM Enterprise Security Manager to perform log correlation and pattern analysis.

Solution:

You can create a rule to identify the events you want by event source name or other attribute, and forward them to the ArcSight location you want.