Imperva Cyber Community

How to Create Action set for MX GUI Login & Logout and send these logs to SIEM server

Hi,

First - > you have to create the Action Set for System Events.  Go to Menu: Polices -> Action Sets, click green plus and click create.

add action -> Server system log -> Log custom...

Second -> Go to menu Polices -> System Events. Add two new policies: "User logged in" and "User logged out" and in" "follow action" add Action Set from the step above.

that's all.

How to Create Action set for MX GUI Login & Logout and send these logs to SIEM server