Versions Compared

Version Old Version 3 New Version 4
Changes made by

tlapham

tlapham

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Snare can forward log data to Securonix using their pre-configured parsers. This guide outlines the steps to configure the Snare agent, along with links to the Securonix documentation on how to finalise configuration within Securonix itself.

  1. Follow steps outlined here to install the Snare agent. Agent Installation - Snare Windows Agent v5 Documentation - Confluence

  2. To collect the Radius logs from the newly created log file navigate to “Log Sources > Log Files”

  3. Click “Add”, Select the log type and select “ Microsoft IIS web server logs”

  4. Paste in the location of the log file e.g. C:\inetpub\logs\LogFiles\* into the “Log file or Directory Field”

    image-20250213-114359.png

  5. In the “Log File Format” Field input the name of the file e.g. *.log

  6. Once happy click Change configuration and restart the service to save the change.Follow steps outlined here to install the Snare agent. Agent Installation - Snare Windows Agent v5 Documentation - Confluence

  7. Once the agent is installed, login the web UI (https://localhost:6161) and select “Destination configuration”.

    image-20241203-093353.png

  8. Under the “Network Destinations” section, enter the domain/IP address and port for Snare Reflector, and ensure Format is “Snare” and “Delimiter Character” is “Tab”.

...