Creating a KICS for Networks connector for sending events to KUMA
To create a connector for sending events in the web interface of KICS for Networks:
Log in to the KICS for Networks web interface using an administrator account.
Go to the Settings → Connectors section.
Click the Add connector button.
Specify the following settings:
In the Connector type drop-down list, select SIEM.
In the Connector name field, specify a name for the connector.
In the Server address field, enter the IP address of the KICS for Networks Server.
In the Connector deployment node drop-down list, select the node on which you are installing the connector.
You can specify any name.
In the User name field, specify the user name for KUMA to use for connecting to the application through the connector. You must specify the name of one of the KICS for Networks users.
In the SIEM server address field, enter the IP address of the KUMA collector server.
In the Port number field, enter the port number of the KUMA collector.
In the Transport protocol drop-down list, select TCP or UDP.
Select the Allow sending audit entries check box.
Select the Allow sending application entries check box.
Click Save.
The connector is created. It is displayed in the table of KICS for Networks connectors with the Running status.
The KICS for Networks connector for sending events to KUMA is ready for use.