Create Connector profiles to manage and monitor SEM agents

10/9/2018 3:10 PM

12/4/2019 10:47 PM

Use Connector Profiles to manage and monitor similar Security Event Manager (formerly Log & Event Manager) Agents across your network. The following two use cases are the most common for this type of component.

• Configure and manage connectors at the profile level to reduce the amount of work you have to do for large SEM Agent deployments.
• Create filters, rules, and searches using your Connector Profiles as Groups of SEM Agents. For example, create a filter to show you all Web traffic from computers in your Domain Controller Connector Profile.

Complete the two procedures below to create a Connector Profile using a single SEM Agent as its template.

Security Event Manager

To create a Connector Profile using a SEM Agent as a template:

1. Configure the connectors on the SEM Agent to be used as the template for your new Connector Profile. These connectors are to be applied to any SEM Agents that are later added to the Connectors Profile.
2. Click the Build menu, and then select Groups.
3. Click the + menu, and then select Connector Profile.
4. Give your new Connector Profile a Name, and enter a Description if you wish.
5. Select the SEM Agent you want to use as your template from the Template list next to the Description field.
6. Click Save.

To add SEM Agents to your new Connector Profile:

1. Locate the new Connector Profile in the Build > Groups view.
2. Click the gear icon next to your Connector Profile, and then select Edit.
3. Move SEM Agents from the Available Agents list to the Connector Profile by clicking the arrow next to them.
4. If you are finished adding SEM Agents to your Connector Profile, click Save.

   Note: You can also add agents to a connector profile in the HTML5 SEM Events Console. Learn more here.

The connector configurations set for the template agent will be applied to any agent added to the Connector Profile.