cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

How to collect log information from TM Officescan

Jump to solution

I found a KB talking about how LEM collects TM Officescan log information.

Set up Officescan syslog messages with LEM - SolarWinds Worldwide, LLC. Help and Support

However, Officescan Server 11 doesn't support sending out log in syslog format actually........

Any one is using LEM to collect Officescan's logs?

Thanks

0 Kudos
1 Solution
Product Manager
Product Manager

Hi Ray,

Apologies for the inaccurate documentation, we'll get the KB updated.

As per this Trend Micro KB, notifications are automatically sent to the Windows Event Log on the OfficeScan server. In order to collect those logs on your OfficeScan you need to install the LEM agent on that server. Once the agent is installed, it will appear under Manage -> Nodes on the LEM web console. Select the gear icon next to your OfficeScan server and click 'Connectors'. You can then search for the OfficeScan connector, create a new instance of the connector and start it. You should then see OfficeScan logs appearing in your LEM web console.

If you have any difficulties or questions let me know.

View solution in original post

2 Replies
Level 7

Hi.

I was looking for a solution to this integration with Tren Micro and I found this provider documentation using Log Forwarder:

https://docs.trendmicro.com/en-us/enterprise/control-manager-70/tools-and-additional/using-logforwar...

I hope it is helpful as a second option for integration.
Regards.

0 Kudos
Product Manager
Product Manager

Hi Ray,

Apologies for the inaccurate documentation, we'll get the KB updated.

As per this Trend Micro KB, notifications are automatically sent to the Windows Event Log on the OfficeScan server. In order to collect those logs on your OfficeScan you need to install the LEM agent on that server. Once the agent is installed, it will appear under Manage -> Nodes on the LEM web console. Select the gear icon next to your OfficeScan server and click 'Connectors'. You can then search for the OfficeScan connector, create a new instance of the connector and start it. You should then see OfficeScan logs appearing in your LEM web console.

If you have any difficulties or questions let me know.

View solution in original post