Blue Coat Systems Malware Analysis configuration

This section describes how to send logs from Blue Coat Systems Malware Analysis to the Trellix Comm Broker using syslog.

To send logs from Blue Coat Systems Malware Analysis:

Configure remote syslog server (Trellix Comm Broker Sender) settings using parameters in the table below.

(config) # ma-settings
(config-ma-settings) # remote_syslog <parameter>

Parameter	Description
`enabled \| disabled`	Enable or disable remote syslog.
`port <number>`	Server port from which to send syslog messages. The default port number is 514.
`protocol UDP \| TCP`	Protocol used by the remote syslog server. The default protocol is UDP.
`server <hostname or IP address>`	Hostname or IP address of the remote syslog server.

The following example configures the IP address of the Trellix Comm Broker Sender.

(config-ma-settings) # remote_syslog server 10.10.10.10