Start your 14-day free trial today & Get 20% Off All Annual Managed ELK Plans

No Credit Card Required

Try Free

Already have an account? Sign In

Send data via McAfee Epolicy Orchestrator to your Logstash instance provided by

McAfee Epolicy Orchestrator

Ship McAfee EPO Logs to Logstash

McAfee Epolicy Orchestrator

Step 1 - Set up syslog server outputCopy

Locate the registered servers page (under configuration) in McAfee Epolicy Orchestrator.

Registered servers page

Now change the server type to syslog server and enter a suitable name for the connection, now hit next.

Change server to syslog server

Press next and you'll be presented with an option for the syslog server and syslog port.

Enter your Logstash endpoint address your-logstash-host and syslog-ssl port number your-ssl-port

Enter logstash endpoint

Once you have entered the details you can test the connection using the button on screen.

Connect to server

Step 2 - how to diagnose no data in StackCopy

If you don't see data appearing in your Stack after following the steps, visit the Help Centre guide for steps to diagnose no data appearing in your Stack or Chat to support now.

Toggle View

Expand View

Return to Search