2 Replies Latest reply on Sep 12, 2017 10:42 AM by eggroll1980

    How to use LEM to collect McAfee logs


      Hi, so I'm coming into an environment with Orion and LEM.  I've got a decent grasp of Orion but not of LEM yet.  I'm being asked the following:


      I would like the following locations captured by the LEM agent for logging back to the database.

      :\Program Files(x86)\McAfee\Agent Handler\DB\Logs

      :\Program Files(x86)\McAfee\ePolicy Orchestrator\DB\Logs



      My question is how is this done?  My limited understanding is that the LEM agent is installed on nodes (Windows or Linux) and then use connectors to gather logs from Event Viewer to be collected into LEM.  How do I configure LEM to pull the logs from those two specific paths?  I looked at the list of connectors and searched for McAfee but what comes up doesn't tell me if these are the logs my mgr wants.