Before you begin

Expand all | Collapse all

When setting up automatic export of events in the Kaspersky Security Center Linux, you must specify some of the SIEM system settings. It is recommended that you check these settings in advance in order to prepare for setting up Kaspersky Security Center Linux.

To successfully configure automatic sending of events to a SIEM system, you must know the following settings:

• SIEM system server address

  The IP address of the server on which the currently used SIEM system is installed. Check this value in your SIEM system settings.

• SIEM system server port

  Port number used to establish a connection between Kaspersky Security Center Linux and your SIEM system server. You specify this value in the Kaspersky Security Center Linux settings and in the receiver settings of your SIEM system.

• Protocol

  Protocol used for transferring messages from Kaspersky Security Center Linux to your SIEM system. You specify this value in the Kaspersky Security Center Linux settings and in the receiver settings of your SIEM system.

See also: Scenario: Configuring event export to SIEM systems

Page top