Set up Beat Collection

To collect any Beat, accept the log source, and set up log source virtualization, do the following procedure.

A support case must be opened for an open collector to be set up in your environment. Once the setup is complete, you can proceed with this section.

Accept the Pending Log Source

In the Client Console, click Deployment Manager from the toolbar.
Click the Log Sources tab.
The New Log Sources grid appears. A pending log source with a hostname similar to (customerid)-opencollector.c.e3-hub753dd405.internal is listed here.
Select the  check box in the Action column for this log source.
Right-click the entry and select Actions and then select Change Log Source Type.
The Log Source Type Selector dialog box appears.
In the Text Filter textbox, enter “Open Collector”.
Click Apply.
Select System : Syslog - Open Collector from the list of log sources that appear in the Log Source Type list box.

Do not select the specific log source types here. It must be done latter in the procedure.
Click OK.
The Change Log Source Type Successful dialog box is displayed with the updated change.
Click OK.
Right-click the entry in the New Log Sources grid and select Actions.
Select Resolve Log Source Hosts.
The Resolve Known Hosts Complete dialog box is displayed with the updated change.
Click OK.
Right-click the entry in the New Log Sources grid and select Actions.
Select Accept.
To customize the variables, click Customize and make the following changes as required:
1. Collection System Monitor Entity
2. Log Message Processing Settings
3. Log Data Management and Processing Settings
4. Silent Log Message Source Settings
To use the default set up, click Defaults and select the customized defaults that were previously selected. 
1. Select a default batch amount between 100 and 5000.
Click OK.
Click Refresh to see the newly accepted Log Source in the grid.

After this initial setup, you can start configuring the beats in the Web Console. Instructions for specific beats are available in the next sections.