Views:

Install the Third-Party Log Collection service on your deployed Service Gateway to begin collecting third-party logs and forwarding the log data to Trend Vision One for analysis and correlation or compliance purposes.

To collect third-party logs via Service Gateway, you must have a compatible Service Gateway deployed. For more information, see Deployment guides.

Procedure

  1. Go to Workflow and Automation → Service Gateway Management.
  2. Select the Service Gateway you want to manage.
    Important
    Important
    • Make sure that your selected Service Gateway virtual appliance meets the minimum specifications required to support the Third-Party Log Collection service. Minimum requirements are 1 virtual CPU and 128 MB of virtual memory, which supports sending 30,000 logs per second. For more information, see Service Gateway appliance system requirements.
    • When configuring multiple services, you must allocate the minimum virtual CPU and virtual memory requirement per service to ensure proper functionality.
  3. Click Manage Services.
  4. Click the install icon (installService=6a80f6d7-0cae-4a25-9c85-0c61f996b89a.png) for the Third-Party Log Collection service.
    The Third-Party Log Collection service is installed on the Service Gateway. The Service Gateway is available for selection when adding a collector in Third-Party Log Collection.
    To receive log data in Third-Party Log Collection using the TLS protocol, you must upload a valid certificate from your organization to the Service Gateway. For instructions, see How do I upload a certificate to a Service Gateway?
  5. Go to Agentic SIEM & XDR → Data Source and Log Management → Third-party log repositories.
  6. Create a new log repository or select an existing log repository.
  7. Go to the Collectors tab and click Add collector.
    The Add collector screen appears.
  8. Add a collector using the Service Gateway you configured.