topic Re: Log360 Syslog in Cortex XDR Discussions

Log360 Syslog

TimGowen — Mon, 21 Feb 2022 07:45:12 GMT

I'm trying to connect Cortex XDR to my Syslog server which is Log360. I have a public IP NATed to the internal server and have opened the firewall to our tenant IPs.

The test message sends from the Cortex end but at the moment I can see nothing in Log360, which may be because it is waiting for a specific event to log.

Does anyone know whether my setup (diagram attached) is fundamentally correct and 'should work'?

Re: Log360 Syslog

epalcev — Mon, 21 Feb 2022 13:14:53 GMT

Hi @TimGowen

How did you connect the Syslog?

To forward Syslogs from XDR to Syslog listener you need to go to Settings=>General=>Notifications=>Add forwarding Configuration

In the summary choose the Syslog server:

Let me know if you have any additional questions.