Enable Log Forwarding to Email
Table of Contents
4.2 (EoS)
Expand all | Collapse all
-
- Set Up the Endpoint Infrastructure
- Activate Traps Licenses
-
- Endpoint Infrastructure Installation Considerations
- TLS/SSL Encryption for Traps Components
- Configure the MS-SQL Server Database
- Install the Endpoint Security Manager Server Software
- Install the Endpoint Security Manager Console Software
- Manage Proxy Communication with the Endpoint Security Manager
- Load Balance Traffic to ESM Servers
-
- Malware Protection Policy Best Practices
- Malware Protection Flow
- Manage Trusted Signers
-
- Remove an Endpoint from the Health Page
- Install an End-of-Life Traps Agent Version
-
-
- Traps Troubleshooting Resources
- Traps and Endpoint Security Manager Processes
- ESM Tech Support File
-
- Access Cytool
- View the Status of the Agent Using Cytool
- View Processes Currently Protected by Traps Using Cytool
- Manage Logging of Traps Components Using Cytool
- Restore a Quarantined File Using Cytool
- View Statistics for a Protected Process Using Cytool
- View Details About the Traps Local Analysis Module Using Cy...
- View Hash Details About a File Using Cytool
Enable Log Forwarding to Email
The ESM Console generates logs for over 60
types of events including security events, policy configuration
changes, and monitoring events (agent and server). Depending on
the type and severity of the data in the log files, you may want
to be receive email alerts when critical events require your attention.
The ESM Console forwards logs to one or more email addresses using
the SMTP service. If you want to forward all or some of these logs
to an external email address, you can use SSL for reliable and secure
transport of logs. After configuring the email reporting settings,
you can send a test message to verify the log forwarding settings.
The
date/time of the each logged event is in Universal Time Coordinated
(UTC).
Use the following workflow to configure the
ESM Console to send logs and events to an email account.
- Enable email reporting.From the ESM Console, select SettingsESMEmail, and then select Enable Mail Reporting.
- Configure the email settings.Specify the following email settings:
- Display Name—Display name for the email account that sends the logs.
- User name—Name of the user who can access the SMTP service.
- Password—Password for the user account that can access the SMTP service.
- Host—Hostname or IP address of the SMTP service.
- Smtp Port—Communication port of the SMTP service (default is 0).
- Enable SSL—Select this option for secure transport of logs in email.
- Email Address—Email address of the sender from which the logs are sent.
- Recipient—Email address of the recipients to which the logs are sent. Use a semicolon (;) to separate multiple email addresses. For example, name1@mail.com;name2@mail.com.
- Email Timeout (Seconds)—Period (in seconds) after which the ESM stops trying to send logs (default is 60; range is 1 to 120).
- Select the events that you want to send to an external
email address.In the Logging Events area, select one or more of the events. Scroll through the list to see additional types of events you can send.
- Save your settings.Click Save.
- Verify the configuration of your email settings.Click Send Test Message. The ESM Console sends a test communication to the email address using the information on the Email page. If you do not receive the test message, confirm that your settings are correct and then try again.