Security Compliance

Why you cannot configure a default Connector Profile for new nodes in SEM

This article provides information about configuring new agent nodes to become automatically members of a default Connector Profile.

First published date

10/19/2018 11:20 PM

Last published date

5/30/2019 1:24 PM

Overview

This article applies to Security Event Manager (formerly Log & Event Manager).

This article provides information about configuring new agent nodes to become members of a default Connector Profile automatically.

Product section

Security Event Manager

Resolution

Unfortunately, it isn't currently possible to configure a default Connector Profile. All new Windows agents will come deployed with connectors to read the three default Windows logs: Application, Security, and System.

Any Linux/Unix-based OS agent nodes will not come with default connectors for the same reason there are no default Connector Profiles: There is too much variability between individual OS distributions, server roles, etc, and configured connectors that aren't appropriate for that host can cause issues.