Solved!
Go to SolutionCEE & Graylog
Hello,
is possible to setup Graylog to receiving CEE audit logs?
I setup successfully a splunk endpoint with his dedicated settings but I try to do the same on Graylog with GELF HTTP but the result is always ERROR_CEPP_NOT_FOUND.
thanks
Regards
DELL-Sam L
Community Manager
•
8118 Posts
•
34619 Points
1251
0
Posted March 24th, 2021 14:00
Hello Esprinet,
It maybe possible, but I am not seeing any steps to configure or graylog or insight.
Rainer_EMC
6 Operator
•
8645 Posts
1194
0
Posted March 25th, 2021 06:00
There are two supported ways to utilize the CEPA interface
Either the vendor works with Dell EMC engineering - than he gets its own credentials and support and can be found on the list of supported SIEM applications in the Unity ESSM
Or you configure CEPA to send the requests to RabbitMQ and then RabbitMQ as the message broker is responsible for sending to whatever application that uses them