Enable the Syslog Reporting

Syslog Type

Set to UDP, TCP, or SecureTCP for Syslog data output. This setting is determined by the protocol used by the Agent receiving data over Syslog. If NetMon is integrated with the LogRhythm SIEM, you should use TCP for Syslog.

Syslog IP

Enter the IP address of the Agent or other collector that will collect Syslog output.

Syslog Port

The default Syslog port for the LogRhythm SIEM is 514, but it can be changed to 601 or to any port higher than 1000.

Syslog Max Line Length

The maximum, single-message line length (in characters) for a Syslog protocol. The default value is 2000.

Password Scrubbing

Set to ON to mask unencrypted passwords as a series of asterisks rather than show them in cleartext.

Forward All Supported Data

Set to ON to allow NetMon to forward alerts and diagnostics, along with metadata such as basic license level, version information, and anonymous usage statistics. Set to OFF (default) to send only alerts and diagnostics.

Heartbeat Report Time

The time interval (in seconds) between heartbeats when NetMon is synced with the LogRhythm SIEM. The default value is 60.

Peer Common Name

Defines the peer common name for SecureTCP. Type a peer common name in the text box. This option is only required if you are using SecureTCP.

CA Cert, Machine Cert, or Machine Key

Certificates required for SecureTCP. Click to upload a CA certificate, machine certificate, and machine key. This option is only required if you are using SecureTCP.