Xcitium NxSIEM

• Introduction To Comodo NxSIEM
  • Logging-in To The Administrative Console
• The Main Interface
• The Dashboard
• Customer Asset Management
  • Adding Customers
  • Adding Assets For Monitoring
    • Hard Assets
    • Soft Assets
  • Downloading And Installing The NxSIEM Agent On Endpoints
  • Configuring Nxlog And Rsyslog Servers To Send Logs To NxSIEM Server
  • Editing Customers
• Log Collection Agents And Policies
  • Collection Agents
    • Downloading NxSIEM Windows And Linux Agents
    • Managing Agents
    • Agentless Log Collection
  • Log Collection Policies
    • Audit Events Policy
    • Flat File Policy
    • Remote Log Collection Policy
    • Syslog Policy
    • Configuring Log Collection Policies
• Query Management
  • Configuring Event Queries
  • Configuring Custom Dashboards
• Managing Rules
• Incidents And Cases
  • Managing Incidents
  • Managing Cases
• Live Lists
  • Managing Live Lists
  • Managing Live List Content
• Managing Reports
• Administration
  • Viewing Log Collection Summaries
  • Managing Users
  • Viewing License And Subscription Details And Configuring NxSIEM Platform URL
• Appendix 1 – Field Groups And Event Items Description
• Appendix 2 - Configuring Endpoints To Forward Logs To NxSIEM Server
• About Comodo Security Solutions

Collection Agents

The 'Collection Agents' interface allows administrators to download NxSIEM agents for Windows and Linux endpoints, manage agents and configure RSYSLOG software utility for agent-less log collection.

To open the 'Collection Agents' interface, click the 'Navigational Menu' button from the top right, choose 'Agents' and then click 'Collection Agents'.

The 'Collection Agents' interface has three tabs:

• Agent Management – Displays all customer endpoints that have log collection agents installed. Also allows the administrator to manually start and stop agents as required. Refer to the section Managing Agents for more details.

• Agent Dowmload – Enables administrators to download the log collection agent installation files for Windows and Linux endpoints. Refer to the section Downloading NxSIEM Agents for Windows and Linux Endpoints for more details.

• Agentless Collection – Enables administrators to download configuration scripts for the Linux RSYSLOG utility. This will allow you to collect logs from Linux endpoints without installing the collection agent. Refer to the section Agentless Log Collection for more details.