Review the data source selections and then test the search query before the data source is saved.
Note: This step is required. The data export cannot be saved if the query fails.
Save Your Data Export Configuration
Once the Data Export configuration is saved, your data export source becomes available. It becomes visible on the Data Exports page, and the exported data becomes available to your third party application or on the destination server.
Modify the name for the data export in Name text box.
Enter a description for the data export in Description text box (optional)
LCP Configuration Parameters
Table 1-2: Digital Guardian event collector sensor properties to be configured by MSS are shown in the table.
The default protocol for syslog. The collector can also accept logs in TCP.
Note: While TCP offers guaranteed delivery of log packets, it places a larger overhead on the LCP.
To balance TCP for reliability over UDP for speed/simplicity, contact the Symantec MSS onboarding team.
Digital Guardian interface IP address
Logging device IP address mentioned in the Pre-Installation Questionnaire (PIQ).
Note: If the device sends logs using multiple interfaces, contact the Symantec MSS onboarding team.
MSS recommended signatures processed by the Digital Guardian event collector.
The default port number for syslog. For TCP, the default port is 601.
Note: The LCP can be configured to listen on a non-standard port, please advise the Symantec MSS onboarding team if this is a requirement.