Quantcast
Channel: Symantec Connect - ブログエントリ
Viewing all articles
Browse latest Browse all 5094

How to filter exported syslog events from the SEP Manager

$
0
0
Specifically, configure syslog-ng to ignore "Reputation check timed out" events

The "Reputation check timed out" event is annoying when an environment is isolated from the Internet.
The External Logging->Log Filter configuration does allow for some control, but only operates on entire classes of events.

NOTE: The following configuration is specific to syslog-ng (https://syslog-ng.org/).

source syslog_udp {
        udp(port(514));
};
destination df_sep {
        file("/var/log/sep.log");
};
filter reputation_filter {
        not message("Reputation check timed out");
};
log {
        source(syslog_udp);
        filter(reputation_filter);
        destination(df_sep);
};


Viewing all articles
Browse latest Browse all 5094

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>