Xcitium SIEM

• Introduction To Comodo CWatch Network
  • Purchase A License
  • Log-in To The Admin Console
• The Main Interface
• The Dashboard
• Customer Asset Management
  • Add Customers
  • Add Assets For Monitoring
    • Hard Assets
    • Soft Assets
  • Configure Nxlog And Rsyslog To Send Logs To CWatch Network Server
  • Edit Customers
• Query Management
  • Configure Event Queries
  • Long Term Analysis
  • Configure Custom Dashboards
  • Event Field Selection Settings
• Manage Rules
  • Manage Correlation Rules
  • Manage Tagged Rules
  • Manage Aggregation Rules
• Incidents
  • Manage Incidents
  • Incident Category Management
  • Category Action Management
• Lists
  • Manage Live Lists
  • Manage Live List Content
  • Manage Range List Content
  • Manage IP Range List Content
  • Manage Multiple Column List Content
• Manage Reports
• Administration
  • Event Collection
  • Phantom Settings
  • Manage Users
  • View License And Subscription Details
• Appendix 1 – Field Groups And Event Items Description
• Appendix 2 – CWatch Supported Logs
• About Comodo Security Solutions

Add Customers

 

• To monitor customer networks, you first need to add a customer then provide details of their networks and other assets.

• Once a customer is added, a 'Network Activation Key' and 'Token' will be generated for them.

• This token, which is configured in the log config file, is used by cWatch to identify the web-server or network. 

• See 'Configure NxLog and Rsyslog to Send Logs to cWatch Network Server' for more details.
  

Add a new customer

Customers added to your Comodo One / Comodo Dragon / ITarian account are automatically added to cWatch.

• Login to your Comodo One / Comodo Dragon / ITarian MSP account

• Click 'Management' then 'Customers'

• Click the 'New Customer' button:

• Complete each field on the form then click 'Save' to add the customer.

• Click 'OK' in the confirmation dialog:

• Repeat the process to add more customers.

In the cWatch interface, you can view the customers in the dashboard and asset management screens.

   

• The next step is to: 

• Add assets to cWatch Network for monitoring 

• Download Nxlog and Rsyslog config files to deploy on networks

See 'Add Assets for Monitoring' and 'Configure Nxlog and Rsyslog to Send Logs to cWatch Network Server' for more details.