Sending logs to Securonix

Owned by rthornton
Last updated: Dec 03, 2024
1 min read

Snare can forward log data to Securonix using their pre-configured parsers. This guide outlines the steps to configure the Snare agent, along with links to the Securonix documentation on how to finalise configuration within Securonix itself.

  1. Follow steps outlined here to install the Snare agent. Agent Installation - Snare Windows Agent v5 Documentation - Confluence

  2. Once the agent is installed, login the web UI (https://localhost:6161) and select “Destination configuration”.

    image-20241203-093353.png

  3. Under the “Network Destinations” section, enter the domain/IP address, port

image-20241203-093630.png

  1. Follow steps outlined in Securonix documentation to configure required parsers:

Securonix has various parsers for log data generated and sent from Snare, details on this can be found at the below links. Only steps relating to Securonix configuration need to be followed.