Exporting NX/ NDR Sensor alerts to NDR console

Login to NDR CLI.

Create client profile.

For more information on how to create a client profile see, Creating a client profile using the CLI.

Create client group.

For more information on how to create a client profile see, Creating a client group using the CLI.

The client group generates a token, use this token to configure alerts export on NX / NDR Sensor.

Log in to the Network Security/NDR Sensor Series CLI.

Enter privileged mode:

hostname (config) # enable

Enter configuration mode:

hostname # configure terminal

hostname # fenotify http enable

hostname # fenotify http default format json-normal

hostname # fenotify http service service_name auth enable

hostname # fenotify http service service_name auth header scheme IA

hostname # fenotify http service service_name auth header value "token generated by client-group on NDR

hostname # fenotify http service service_name ssl enable

hostname # fenotify http service service_name prefer message delivery per-event

hostname # fenotify http service service_name server-url

https://NDR_console_IP/services/collector/alert