Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring a FireEye Log Source in JSA

JSA automatically creates a log source after your JSA Console receives FireEye events. If JSA does not automatically discover FireEye events, you can manually add a log source for each instance from which you want to collect event logs.

  1. Log in to JSA
  2. Click the Admin tab.
  3. On the navigation menu, click Data Sources.
  4. Click the Log Sources icon.
  5. Click Add.
  6. From the Log Source Type list, select FireEye.
  7. Using the Protocol Configuration list, select Syslog.
  8. In the Log Source Identifier field, type the IP address or host name of the FireEye appliance.
  9. Configure the remaining parameters.
  10. Click Save.
  11. On the Admin tab, click Deploy Changes.

Related Documentation