This feature allows you to forward event logs from MetaDefender Storage Security to an external system.
This is essential for centralized monitoring, security analysis, and integrating with a SIEM (Security Information and Event Management) platform, such as Splunk.
Supported Platforms and Formats
Syslog uses the UDP protocol and requires the RFC5424 format
Kafka connects directly to an Apache Kafkla cluster.
Before You Begin
Before adding a configuration, ensure that your external logging server is already deployed and accessible from your MetaDefender Storage Security instance. You will need:
A Syslog server ready to accept UDP traffic.
Or, an Apache Kafka cluster with a designated topic.
How to Configure an External Logger
In the MetaDefender Storage Security interface, go to Settings > External Loggers.
Click the + Add new server button to open the configuration panel.
Fill in the required server details, such as the server type, network address (IP or hostname), and port.
Enable the configuration using the toggle switch and save your changes.
