Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

say that we need TLS + add the file in the tree #1985

Merged
merged 4 commits into from
Sep 3, 2024
Merged

say that we need TLS + add the file in the tree #1985

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
8ffd10b
say that we need TLS + add the file in the tree
pbivic Sep 3, 2024
ced5add
fix bad indent
pbivic Sep 3, 2024
17b5632
fix tree
pbivic Sep 3, 2024
f870155
fix list
pbivic Sep 3, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 21 additions & 16 deletions docs/integration/categories/endpoint/eset_protect.md
View file
Open in desktop
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tu peux fix aussi l'indentation? 🙏
image

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image

Original file line number Diff line number Diff line change
Expand Up @@ -62,29 +62,34 @@ type: intake
### Instructions on the 3rd party solution

To enable Syslog server in ESET Protect on On-Prem :
1. In admin console go to `More` > `Settings`.
2. Open `Advanced Settings` tab.

1. In admin console go to `More` > `Settings`.
2. Open `Advanced Settings` tab.

![Advanced Settings](/assets/instructions/eset_protect/enable_syslog_1.png)

3. Click on `Syslog server` > `Use Syslog server`.
4. Then click on `Logging` > `Export logs to Syslog` and choose `JSON` format.
5. Save configuration.
3. Click on `Syslog server` > `Use Syslog server`.
4. Then click on `Logging` > `Export logs to Syslog` and choose `JSON` format.
5. Save configuration.

![Syslog configuration](/assets/instructions/eset_protect/enable_syslog_2.png)

!!! warning
Important note - For ESET Protect Cloud, you will required a secured syslog forwarder. Please read our article [how to secure data collection to the syslog forwarder](intergration/ingestion_methods/syslog/secured_forwarded.md)

To enable Syslog server in ESET Protect on Cloud:
1. In admin console go to `More` > `Admin` > `Settings`.
2. Click `General` > `Syslog`
3. Check `Enable syslog sending`
4. Select `JSON` as the format of the payload
5. Select `Syslog` as the format of the envelope
6. Select `Information` as the minimal log level
7. Check all event types
8. Type the address of the log concentrator
9. Check `Validate CA Root certificates of TLS connections`
10. Copy the public certificate of the Certificate Authority in the textarea
11. Click `Apply settings`

1. In admin console go to `More` > `Admin` > `Settings`.
2. Click `General` > `Syslog`
3. Check `Enable syslog sending`
4. Select `JSON` as the format of the payload
5. Select `Syslog` as the format of the envelope
6. Select `Information` as the minimal log level
7. Check all event types
8. Type the address of the log concentrator
9. Check `Validate CA Root certificates of TLS connections`
10. Copy the public certificate of the Certificate Authority in the textarea
11. Click `Apply settings`


![Advanced Settings](/assets/instructions/eset_protect/cloud_syslog.png)
Expand Down
1 change: 1 addition & 0 deletions mkdocs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -311,6 +311,7 @@ nav:
- Third-party syslog services: integration/ingestion_methods/syslog/syslog_service.md
- Rsyslog: integration/ingestion_methods/syslog/rsyslog.md
- Syslog NG: integration/ingestion_methods/syslog/syslog-ng.md
- Secured forwarding: integration/ingestion_methods/syslog/secured_forwarding.md
- List of Intakes:
- Overview: integration/categories/overview.md
- Applicative:
Expand Down
Loading