Syslog and ICA

Products

• Information Centric Analytics

Issue/Introduction

Does Information Centric Analytics (ICA) provide a method for sending notifications to syslog or other third-party logging and notification tools?

Resolution

ICA does not provide a method to directly output logging or notifications to third-party tools like syslog. Instead, you can either configure Action Plans to generate e-mail notifications or you can create a custom solution using ICA's REST API in conjunction with third-party tools. Refer to the following section of the ICA Administrator Guide to get started with using ICA's REST API:

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/information-centric-analytics/6-6/Administrator-Guide/REST-API.html

Online help for the API is accessed through the ICA console using the following URL:

http[s]://<ICA_hostname>/restapi