Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Content Layer
id229691331
Content Column
id229691342
Content Block
background-color$lightGrayColor
id229691330

Topics Discussed

Table of Contents
maxLevel3
minLevel3

Content Block
id229691332

You can use this document to learn how to create and configure a remote Log Relay device.

Excerpt Include
ESLP:Permissions for Log Relay and Remote Log Collection (snippet)
ESLP:Permissions for Log Relay and Remote Log Collection (snippet)
nopaneltrue

Note

Before you begin, you must first convert a virtual machine into a Log Relay device. To learn more, see Obtain Log Relay for Remote Log Collection.

For introductory information on Log Relay, see Introduction to Log Relay.


Create a remote log source 


  1. In the Armor Management Portal (AMP), in the left-side navigation, click Security
  2. Click Log & Data Management
  3. Click External Sources
    •  If you do not see any data, then click Let's Get Started.
  4. Click External Sources
  5. Click the plus ( + ) icon. 
    • If you do not have any log sources already created, then click Add a New Log Source


Anchor
Configure a remote log source
Configure a remote log source
Configure a remote log source 


Based on your specific log type, review the following options to create and configure a remote log source:

Excerpt Include
ESLP:Log Sources (snippet)
ESLP:Log Sources (snippet)
nopaneltrue


Info

Troubleshooting

In general, if you are having issues adding Log Relay to a remote log device, consider that:

You need to update your permissions in AMP.  

  • In AMP, you must have the following permissions added to your account:  
    • Write Virtual Machine
    • Delete Log Management
    • Read Log Endpoints
    • Read Log Relays
    • Write Log Relays
    • Delete Log Relays

Note

To add the above-mentioned AMP permissions to your account, see Roles and Permissions.

Note

Additional troubleshooting information is located in the specific remote log source documentation. 




Was this helpful?
Rate Macro

Scrolltotop