Configure NetIQ Sentinel Event Forwarding

Create a NetIQ connector to forward BeyondInsight events to the NetIQ® Sentinel™ server in the LEEF format.

  1. In the BeyondInsight console, go to Configuration > General > Connectors.
  2. In the Connectors pane, click Create New Connector.
  3. Enter a name for the connector.
  1. Select NetIQ Sentinel Event Forwarding from the Connector Type list.
  1. Provide a connector name.
  2. Leave Active (yes) enabled.
  3. Provide the required details for the Sentinel server:
    • Select the protocol from the Available Output Pipelines list: TCP, TCP-SSL, or UDP.
    • Enter the Host Name and Port.
    • Select an optional syslog facility from the list.
  4. Click Test Connector to send a test event message.
  5. Click Create Connector.