What configuration should be done on sophos and graylog to get logs from sophos

Graylog Central (peer support)
1

What configuration should be done on sophos and graylog to get logs from sophos

2

Hi @adiya_v

You could setup a syslog receiver on graylog and in graylog you can setup syslog to send messages to your graylog server.

Kind Greetings,

Arie

3

I did’t get this, can’t we create a syslog tcp input in graylog?

4

You can do thaat in System > Inputs:

afbeelding
afbeelding861×509 21.3 KB

5

for sophos what should be the input?

6

You can try syslog UDP and see if that works for your needs

7

then what should be the configuration in sophos?

8

check their documentation

9

sophos send udp or tcp traffic?

10

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.