Forum Discussion
- DojsCirrostratus
Hi,
you can send to both together.
TIP:
- Create a Pool with your IP of ArcSight
- Create Log Destination HighSpeed with the pool
- Create Log Destination Remote Syslog with the HSL above
- Inside of remote-logging-publisher of WAF, insert destination create above
See if works, for me works in QRadar