With the release of Metascan version 3.8 we now provide native support for Syslog notifications.
Metascan’s Syslog support allows administrators to easily integrate third party Syslog tools such as Splunk, Kiwi Syslog Server, and ArcSight Logger, providing remote monitoring and reporting for potential issues with their Metascan system. The support currently covers any events which would be written to the Windows Event log and is configured in Metascan’s Management Console.
These events include:
- Engine Update Requests
- Engine Update Failures
- Starting/Stopping/Crashes of all Metascan processes
- License warnings (expiration of license or reaching limit of client and scans)
In future releases we are planning on expanding our Syslog support to also include all standard logging, allowing users to leverage all scan based data reported through a Syslog server.
In addition to the Syslog and Event Log based logging, we also offer scan based logging which is written to our database using MongoDB and are viewable via the Management Console.
Make sure to register for our upcoming webinar on March 5th, to learn more about the new Metascan Management Console and configuring your existing Metascan server through any web browser.
