Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Create Action set for MX GUI Login & Logout and send these logs to SIEM

    Posted 11-12-2024 05:48

    How to Create Action set for MX GUI Login & Logout and send these logs to SIEM server


    #AllImperva

    ------------------------------
    Vaddavalli Lakshmanudu
    Technical Associate
    Meta Infotech Pvt. Ltd.
    hyderabad
    ------------------------------


  • 2.  RE: Create Action set for MX GUI Login & Logout and send these logs to SIEM

    Posted 11-12-2024 07:03

    Hi,

    First - > you have to create the Action Set for System Events.  Go to Menu: Polices -> Action Sets, click green plus and click create.

    add action -> Server system log -> Log custom...

    Second -> Go to menu Polices -> System Events. Add two new policies: "User logged in" and "User logged out" and in" "follow action" add Action Set from the step above.

    that's all.



    ------------------------------
    Karol Gruszczynski
    IT Security Expert
    Trafford IT Sp. z o.o.
    Warszawa
    ------------------------------



  • 3.  RE: Create Action set for MX GUI Login & Logout and send these logs to SIEM

    Posted 11-12-2024 23:39

    Hi Karol,

    Thank you for your Guidance

    .



    ------------------------------
    Vaddavalli Lakshmanudu
    Technical Associate
    Meta Infotech Pvt. Ltd.
    hyderabad
    ------------------------------

    Original Message