Sending audit data from Authentication Hub to SIEM server via SysLog

Products

• VIP Authentication Hub

Issue/Introduction

Can all audit data from VIP Authentication Hub (VIP AH) be sent to a SIEM server via SysLog?

Environment

VIP Authentication Hub

Resolution

SSP utilizes Fluent-Bit agents. If multiple outputs from Fluent-Bit are needed, this can be achieved by configuring Fluent-Bit to stream data to multiple output targets.

Our recommendation is to refer the sections Configuring Target Log and Audit Messages and Syslog Plugin to implement this custom use-case.