Auditing Configuration allows you to enable or disable naudit service and CEF format.
This option allows you to send the events to Platform Agent also.
This option allows you to log the events in CEF format. You should also specify the following auditing server details to use CEF format:
Fields |
Description |
---|---|
Destination host |
Specifies the destination hostname or IP address of the auditing server. |
Destination Port |
Specifies the destination port number of the auditing server. |
Network Protocol |
Specifies the protocol that should be used to establish communication with the auditing server. To establish a secure communication with the auditing server, select TCP protocol and enable Use TLS option. |
Intermediate event store directory |
Specifies the temporary directory where the events can be are stored. This directory serves as a backup for an auditing server. |