Add NetMon in the Client Console

Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.

To add LogRhythm NetMon to your LogRhythm SIEM deployment

1. Obtain the external IP address of the server or appliance where LogRhythm NetMon is installed.
2. Add the LogRhythm NetMon server or appliance as a host under the Entities tab. For more information on how to do this, see Add Host Records Manually.
3. Obtain the API Key for the selected Network Monitor. To get the API Key, ask your LogRhythm NetMon administrator, or do the following:
   1. Log in to the LogRhythm NetMon Web Interface as the admin user.
   2. On the main toolbar, click Configuration.
   3. Click the User tab on the left.
      The API Key appears at the top of the page.
   4. Copy the key.
4. On the main toolbar of the Client Console, click Deployment Manager.
5. Click the Network Monitors tab.
6. Right-click the grid, and then click New.
   The Network Monitor Properties dialog box appears.
7. In the Name box, type a name for the Network Monitor.
8. Click the Host icon.
   The Host Selector window appears.
9. Under Entity Filter, select the root entity where the Network Monitor host was added.
10. Use the Text Filter box and Keyword or Regex options to filter the displayed hosts.
11. Select the appropriate Network Monitor host from the list, and then click OK.
12. In the Management/API Address box, type the external IP address of the Network Monitor.
13. In the API Username box, type the login ID of the Network Monitor administrator. The default login is admin.
14. In the API Key box, type or paste the Network Monitor API Key.

15. Click Test to connect to the Network Monitor and validate the API address, username, and key.

    

    If the test fails, ensure that you have network connectivity to the IP address and verify that you are using the correct username and API key.

16. After the connection test is successful, click OK.