Documentation forSecurity Event Manager

Create a connector profile from a template

Create a profile from a template with preconfigured connectors.

  1. In the SEM Events Console, navigate to Nodes > Connector Profiles.

  2. On the Connector Profile toolbar, click Create, and then select From template.

  3. From the Connector profile template drop-down list, select a template, and then click Continue.
  4. Enter a new name and description for the profile, and then click Create and Next.

    Under Configured connectors is a list of preconfigured template connectors.

  5. To configure an additional connector, click Add connector.
  6. Under Refine Results, expand the Type group, and then select Connector or Active Response.
  7. Find the connector to configure. Type part of the connector name in the search box, or use the filter menus in the Refine Results pane.

  8. Complete the connector configuration form. The following fields are common across most connectors:
    • Name: Enter a user-friendly label for your connectors.
    • Log File: Enter the location of the log file that the connector will normalize. This is a location on either the local computer (Agents), or the SEM appliance (non-Agent devices).
    • Output: Normalized, Raw + Normalized, Raw. You only need to configure these values if SEM is configured to save raw (unnormalized) log messages.
  9. Click Add.
  10. Continue to add more connectors to the profile as needed, and then click Next.
  11. Click Assign agents to add one or more agents to the profile.

    An agent can only be a member of one connector profile. Learn more about connector profiles here.

  12. To complete the connector profile configuration, click Finish.