_Copyright

_{© 2021 Outpost24® All rights reserved. This document may only be redistributed unedited and unaltered. This document may be cited and referenced only if clearly crediting Outpost24® and this document as the source. Any other reproduction and redistribution in print or electronically is strictly prohibited without explicit permission.}

_Trademark

_{Outpost24® and OUTSCAN™ are trademarks of Outpost24® in Sweden and other countries.}

Introduction

HIAB can pass logs and findings via Syslog events, which work with virtually any other security solution in the market, custom implementation of this with a wide range of SIEMs and event correlations systems among our existing MSSPs and partners already. For example: ArcSight.

Set Up Syslog

To set up Syslog:

1. Go to Menu > Settings > Integrations.
2. Select the Syslog tab.
   
   
   
   
   

3. Provide the below information to use Syslog:

   Option	Description
   Host	Provide the hostname.
   Port	Provide the port that Syslog is using to communicate.
   Facility	Choose a facility code from the drop-down menu. Note Facility code is used to specify the type of program that is logging the message.
   Prefix	Enter any word that you want to add as a prefix for each line.
   Protocol	Select one of the protocols from the drop-down menu.
   Send audit log	Check this box to receive audit log.
   Arcsight	Click on this field to use the ArcSight format.
   TLS	Click on this field to encrypt data. Use secure transport layer.
   Certificate	Upload the certificate for the Syslog server. Only needed if TLS is enabled.
   Certificate uploaded	Displays if any certificate has been uploaded.
   Status	Click on this button to check the network connectivity.
   Save	Click on this button to save your current settings.

Reference

Integrations