Configuring a FireEye Log Source in JSA
JSA automatically creates a log source after your JSA Console receives FireEye events. If JSA does not automatically discover FireEye events, you can manually add a log source for each instance from which you want to collect event logs.
- Log in to JSA
- Click the Admin tab.
- On the navigation menu, click Data Sources.
- Click the Log Sources icon.
- Click Add.
- From the Log Source Type list, select FireEye.
- Using the Protocol Configuration list, select Syslog.
- In the Log Source Identifier field, type the IP address or host name of the FireEye appliance.
- Configure the remaining parameters.
- Click Save.
- On the Admin tab, click Deploy Changes.