The next step after successfully Configuring Darktrace is to add the collector type to Axon.
Add a Darktrace Collector
Only Administrators can take this action.
- In the lower-left corner of the main screen, click the Administration cog.
The Administration menu appears on the left side.
- Under Integrations, click Collectors.
The Collectors page appears.
- In the upper-right corner, click + Add Collector.
The Add Collector Wizard appears.
- Select Darktrace from the list of collector types.
A list of Log Source Types associated with the Darktrace collector appears on the right.
- Click Configure.
Enter the following information on the configuration page.
Fields marked with an asterisk (*) are required.
Option Description Collector Name * Enter a unique name for this collector. Description Enter an optional detailed description for this collector. Collection Schedule *
Enter a value and select a time interval (Minutes, Hours, Days) from the drop-list to determine how often the collector sends new requests.
Collection Time Out *
Enter the period after which collection will time out while stalled.
The default of five minutes means that after five minutes of failing to collect, the collection will time out.
Back period for collection *
Enter the period for which logs are collected.
The default of 30 minutes means that every collection gathers logs for the previous 30 minutes.
Public Key * The Public token configured during the steps outlined in Configure Darktrace. Private Key * The Private token configured during the steps outlined in Configure Darktrace.
- Click Connect to test the collector's connection.
If the connection is successful, the Darktrace collector is added to the list of collectors in Axon.