Documentation forSecurity Event Manager

Create a new connector profile

Create a new connector profile without preconfigured connectors or agents.

  1. In the SEM Events Console, navigate to Nodes > Connector Profiles.

  2. On the Connector Profile toolbar, click Create, select New profile, and then click Continue.

  3. Enter a name for the profile and a description (optional), and then click Create and Next.

  4. Under Configured connectors, click Add connector.
  5. Under Refine Results, expand the Type group, and then select Connector or Active Response (or both).
  6. Find the connector to configure. Type part of the connector name in the search box, or use the filter menus in the Refine Results pane.

  7. Complete the connector configuration form. The following fields are common across most connectors:
    • Name: Enter a user-friendly label for your connectors.
    • Log File: Enter the location of the log file that the connector will normalize. This is a location on either the local computer (Agents), or the SEM appliance (non-Agent devices).
    • Output: Normalized, Raw + Normalized, Raw. You only need to configure these values if SEM is configured to save raw (unnormalized) log messages.
  8. Click Add.
  9. Continue to add more connectors to the profile as needed, and then click Next.
  10. Click Assign agents.
  11. Filter and select one or more agents to add to the profile, and then click Assign.

    An agent can only be a member of one connector profile. Learn more about connector profiles here.

  12. To complete the connector profile configuration, click Finish.