Implementation Guide › Configuring Event Collection › Configuring the Default Agent › Review syslog Integrations and Listeners

Review syslog Integrations and Listeners

You can review the default syslog integrations and listeners before you create a connector. Listeners are essentially a template for your syslog connectors that use specific syslog integrations provided as out-of-the-box content with your CA User Activity Reporting Module server.

To review syslog integrations

1. Log into CA User Activity Reporting Module and access the Administration tab.
2. Click the Library subtab and expand the Event Refinement Library node.
3. Expand both the Integrations node and the Subscription node.
4. Select an integration whose name ends with ..._Syslog.

   The integration details display in the right side window. You can review which message parsing and data mapping file the integration uses and other details such as version and lists of suppression rules and summarization rules.

To review a syslog listener

1. Expand both the Listeners node and the Subscription node.
2. Select the Syslog listener.

   The default listener details display in the right side window. You can review details such as versions, suppression and summarization rules, the default ports on which to listen, a list of trusted hosts, and the listener's time zone.