Enabling and disabling information logging to a remote log
You can configure the logging of information about user actions in the web interface and alerts to a remote log. The log file is stored on the server on which the SIEM system is installed. To write to the remote log, you must configure the integration with the SIEM system.
To enable or disable the logging of information about user actions in the web interface and alerts to the remote log:
In the window of the program web interface, select the Settings section, SIEM system subsection.
If you want to enable / disable the recording of information about user actions in the web interface to the remote log, do one of the following:
If you want to enable recording of information about user actions in the web interface, select the Activity log check box.
If you want to disable the recording of information about user actions in the web interface, clear the Activity log check box.
If you want to enable / disable the recording of information about alerts to the remote log, do one of the following:
If you want to enable recording of alert information, select the Alerts check box.
If you want to disable recording of alert information, clear the Alerts check box.
You can select both check boxes simultaneously.
Click Apply in the lower part of the window.
Information logging in the remote log is enabled or disabled.
Users with the Security auditor role can only view information about remote logging settings.