Kaspersky Unified Monitoring and Analysis Platform Integration task settings

The table describes all available settings and the default values of all the settings that you can specify for the Kaspersky Unified Monitoring and Analysis Platform Integration task.

Kaspersky Unified Monitoring and Analysis Platform Integration task settings

Setting

Description

Value

UseTls

Enable or disable the server certificate verification for additional protection of the connection to the KUMA server.

Yes — use a certificate to further secure the connection to the KUMA server.

No (default) — do not use a certificate to secure the connection to the KUMA server.

UseClientCertificate

Enable and disable two-way authentication to further secure the connection to the KUMA server.

If client certificate validation is enabled on the KUMA server side, enable the use of a client certificate and add a client certificate before starting the Kaspersky Unified Monitoring and Analysis Platform Integration task.

Yes — use two-way authentication to further secure the connection to the KUMA server.

No (default value) — do not use two-way authentication.

ConnectionTimeout

Maximum time to wait for a connection to the KUMA server in seconds.

The default value is 5.

The [Servers.item_#] section contains the settings of the KUMA server.

ServerAddress

KUMA server address.

IP address (IPv4 or IPv6) or fully qualified domain name (FQDN) of the integration server can be specified.

If you set UseServerCertificate=Yes, you must specify the fully qualified domain name (FQDN) of the server from the certificate received when purchasing the license to use KUMA.

Default value: 127.0.0.1.

ServerPort

Port for connecting to the KUMA server.

The default value is 443.

ServerProtocol

Protocol for connecting to the KUMA server.

tcp (default value) — use the TCP protocol to connect to the KUMA server.

udp — use the UDP protocol to connect to the KUMA server.

When the UDP protocol is selected, the use of certificates to provide connection protection is not supported (the values of the UseTls, UseClientCertificate and ConnectionTimeout settings are ignored), and there are no events about the connection to the KUMA server.

The [SiemTransferSettings] section contains settings for sending events to the KUMA server.

EventTransferTimeMax

The maximum delay in sending events to the KUMA server in seconds.

The default value is 30.
Page top