You can modify the Symantec Endpoint Detection and Response connection IP address or port number to the syslog server connection.
To edit a connection to a syslog server
Do one of the following:
In the EDR appliance console
To edit the syslog server connection for the default appliance
Do the following:
In the EDR cloud console, click Settings. Under Environment, select an appliance and then click Appliances.
In the EDR appliance console, click Settings > Appliances.
Click Edit Default Appliance.
To edit a custom syslog server connection for a single device
Double-click the device in the Appliances list.
In the EDR cloud console
In the Syslog group, hover over the server that you want to edit (option icons appear). Click the Edit option.
In the Edit Syslog Server dialog box, edit the settings as needed and then click Save.
See Configuring connections to syslog servers
See Deleting a connection to a syslog server
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
This will clear the history and restart the chat.