MySQL Connectors provide connectivity to the MySQL server for client programs. APIs provide low-level access to MySQL resources using either the classic MySQL protocol or X Protocol. Here are the steps to follow for the ingestion of events to Seceon SIEM to have a Comprehensive visibility and Proactive Threat Detection in your Environment.
Step 1. Navigate to Provisioning by clicking on the Provisioning tab located in the top menu bar of the application.
Step 2. Drop down Add on devices by clicking on the downward-facing arrow next to the 'Add on devices' option in the menu.
To add MsSQL connector support, follow the steps below:
Enter the name of the device.
Enter the CCE IP.
In the 'Access ID/User Name' field, enter your MsSQL user. In the 'Password/Secret Key' field, enter your MsSQL password.
In the last field, enter JSON with valid credentials in the following format:
{
"mssql_host":" ",
"mssql_databasename":" ",
"mssql_tablename":" ",
"mssql_port":" ",
"mssql_timeduration":" "
} |
Click on the Save button.
STEP 1:Log in to UI >> SYSTEM
STEP 2: >> Logs and flows collection status
STEP 3: >>To verify the source device IP from the UI:
Log in to the user interface
Navigate to the "SYSTEM" section
Look for the "SOURCE DEVICE IP"
Check the IP address that is displayed
Compare the IP address displayed against the expected source device IP
This will allow you to ensure that the system is properly identifying the source device IP and that it matches the expected IP address..
