6.1 Change Auditing Service Settings

Auditing Configuration allows you to enable or disable CEF format.

Enable CEF format

This option allows you to log the events in CEF format. You should also specify the following auditing server details to use CEF format:

Fields

Description

Destination host

Specifies the destination hostname or IP address of the auditing server.

Destination port

Specifies the destination port number of the auditing server.

Network protocol

Specifies the protocol that should be used to establish communication with the auditing server.

To establish a secure communication with the auditing server, select TCP protocol and enable Use TLS option. Provide the Keystore file name and the Keystore password.

Intermediate event store directory

Specifies the temporary directory where the events can be are stored. This directory serves as a backup for an auditing server.