Appendix D - About the SnareCore Service

For events to be passed to a remote host, the SnareCore service must be running. Ensure the SnareCore service is active by selecting Services from the Administrative Tools or Computer Management menus. If Snare is not running, double click on the service name, then select Automatic from the Startup Type list so that the service is started automatically when the host is rebooted and then click the Start button. Click OK to save the settings.

If necessary, to restart Snare via the command line, navigate to the folder where Snare is installed and as Administrator type:

> net stop snare

> net start snare

This will allow the configuration to be reread and send logs based on the new settings.