Views:

Enable third-party log collection by installing the Third-Party Log Collection service on your deployed Service Gateway.

The Third-Party Log Collection service supports receiving logs in Common Event Format (CEF) from third-party sources and forwarding the log data to Trend Vision One for analysis and correlation or compliance purposes. The service is required to use the features in Third-Party Log Collection. To install the service, you must have a compatible Service Gateway deployed. To learn how to deploy a Service Gateway, see Deployment guides.
Note
Note
This feature is not available in all regions.
Important
Important
This is a pre-release sub-feature and is not part of the existing features of an official commercial or general release. Please review the Pre-release sub-feature disclaimer before using the sub-feature.

Procedure

  1. Go to Workflow and Automation → Service Gateway Management.
  2. Select the Service Gateway you want to manage.
    Important
    Important
    Make sure that your selected Service Gateway virtual appliance meets the minimum specifications required to support the Third-Party Log Collection service. Minimum requirements are 1 virtual CPU and 128 MB of virtual memory, which supports sending 30,000 logs per second.
    When configuring multiple services, you must allocate the minimum virtual CPU and virtual memory requirement per service to ensure proper functionality.
    For more information, see Service Gateway appliance system requirements.
    The details screen for the selected Service Gateway appears.
  3. Click Manage Services.
    The Manage Services drawer appears.
  4. Find the Third-Party Log Collection Service and click the install icon (installService=6a80f6d7-0cae-4a25-9c85-0c61f996b89a.png).
    For more information, see Managing services in Service Gateway.
    The Third-Party Log Collection service is installed on the Service Gateway. The Service Gateway is available for selection when adding a collector in Third-Party Log Collection.
  5. (Optional) If you wish to receive log data in Third-Party Log Collection using the TLS protocol, you must upload a valid certificate from your organization to the Service Gateway. For instructions, see How do I upload a certificate to a Service Gateway?