symantec endpoint protection download insight is disabled

If you are choosing to encrypt TCP, select the button 'Download Certificate' which will download Rapid7's certificate.

Tail File: InsightOps will watch a log file and ingest any new data that is added to it.

Enter the file path, scan interval, and if the directory contains other files, enter a file pattern to specify which files should be collected from the directory.

Watch Directory: The network location of a Dump File (configurable in the External Logging settings in the SEP management console), where log files are copied.

Optionally choose to Encrypt the event source if choosing TCP.

Log Aggregator: specify a port and a protocol.Listen for Syslog: specify a port and a protocol.Configure any Advanced Event Source settings.Optionally choose to send unfiltered logs.Choose a timezone, or optionally display only US timezones.From the list of event source options, choose Symantec Endpoint Protection.Select your collector, and optionally name your event source.

Select the Virus Scan icon from the Security section.At the top right of the page, select Add Data.From your dashboard, select Data Collection on the left hand menu.This option logs anything that would normally be sent via syslog to a single log folder, which can be read using the Watch Directory Collection Method for this event source. When configuring Symantec for syslog delivery, make sure that you check off Export Logs to a Dump File. To learn how to do this, please see page 705 of the Administrator's Guide, which you can find here.Īnother easy configuration option is to use Watch Directory. Typically, Symantec logs are delivered via syslog. Symantec Endpoint Protection utilizes the endpoints on your network to work together in protecting data.

Symantec endpoint protection download insight is disabled