Configure Open Text NetIQ Sentinel Event Forwarding

Create a NetIQ connector to forward BeyondInsight events to the Open Text NetIQ® Sentinel™ server in the LEEF format.

1. In BeyondInsight, go to Configuration > General > Connectors.
2. From the Connectors pane, click Create New Connector.
3. Enter a name for the connector.

4. Select NetIQ Sentinel Event Forwarding from the Connector Type list.
5. Provide a connector name.
6. Leave Active (yes) enabled.
7. Provide the required details for the Sentinel server:
   • Select the protocol from the Available Output Pipelines list: TCP, TCP-SSL, or UDP.
   • Enter the Host Name and Port.
   • Select an optional syslog facility from the list.
8. Click Test Connector to send a test event message.
9. Click Create Connector.

If an event is received from Password Safe Cloud, a Resource Zone can now be associated with any connector that sends data using syslog. If selected, Password Safe Cloud proxies the syslog data through the Resource Brokers associated with that Resource Zone.