Hi everyone,
What I want to do using Cisco Security Suite is to show data on my dashboard using a custom log file.
I do not want to touch the real server that is already functional and set up successfully and it is working on the server side.
What I did is to create a Ubuntu VDI and tried to set up to mimic the real server. I added my custom log files and search and report has data and events showing already, but Cisco Security Suite still does not show any data that I added.
What I found out is that Cisco Security Suite only reads from var/log/syslogs
How do I change the "location" of where it takes the data from?
Is there anyway we can edit the props.conf file or another option?
↧