Configuring the Lexicon Mesh Service
To collect events in a format that is compatible with JSA, you must configure your Lexicon mesh service to generate syslog events in LEEF.
- Log in to the Honeycomb LexCollect system that is configured as the dbContact system in your network deployment.
- Locate the Honeycomb installation directory for the
- Open the
If your deployment does not contain Honeycomb LexCollect, you can edit
- To export syslog events in LEEF, edit the formatter field.
- Save your changes.
The mesh service is configured to output LEEF events. For information about the Lexicon mesh service, see your Honeycomb documentation.