Configuring Exabeam to Communicate with JSA
To collect syslog events from Exabeam, you must add a destination that specifies JSA as the syslog server.
- Log in to your Exabeam user interface (https://<Exabeam_IP>:8484).
https://<Exabeam_IP>:8484and type #setup at the end of the url address.
- In the Navigation pane, click Incident Notification.
- Select Send via Syslog and configure the following
IP Address or Hostname
The IP address of the JSAEvent Collector .
Syslog Severity Level