Cisco Cisco Firepower Management Center 2000
2-17
FireSIGHT User Agent Configuration Guide
Chapter 2 Setting up a User Agent
Configuring a User Agent
Note
Only select this option when Support directs you to do so.
Step 3
Select
Log Messages to Windows Application Log
to log non-debug status messages to both the Windows
application logs and the local event logs.
To view the Windows application logs, open the Windows Event Viewer.
Step 4
Select a time period from the
Message Cache Size
drop-down list to configure how long status messages
are saved before they are automatically deleted from the local event log.
Status messages, once logged to the local event log, are saved for the time period selected in the
Message
Cache Size
drop-down list, then deleted.
Note
The
Message Cache Size
setting only affects the local event log, not the Windows application logs,
even if you select
Log Messages to Windows Application Log
.
Step 5
Click Refresh to view new status messages logged since the last refresh.
If new status messages have been logged since the last refresh, a note displays stating there are new status
messages available. If the refresh results in more than 250 messages displayed, the oldest status
messages are removed from the
messages available. If the refresh results in more than 250 messages displayed, the oldest status
messages are removed from the
Logs
tab. To view more than 250 messages, export the logs. See step
for more information.
Step 6
Click
Export Logs
to export the local event log contents to a comma-separated value file.
The comma-separated value file contains all event log status messages and debug messages.
Step 7
Click
Clear Event Log
to remove all non-debug status messages from the local event log.
The local event is cleared, except for a status message stating the agent removed the messages.
Step 8
To save and apply configuration changes to the agent, click
Save
.
The updated settings are applied to the agent.
Step 9
You have the following options:
•
To configure general agent settings, select the
General
tab. For more information, see
.
•
.
Configuring General User Agent Settings
License:
FireSIGHT
The General tab contains basic User Agent configuration. You can change the agent name reported to
the Defense Center when the agent reports login data. You can also start and stop the agent service,
change the logoff check frequency, and view the current service status.
the Defense Center when the agent reports login data. You can also start and stop the agent service,
change the logoff check frequency, and view the current service status.
To configure general User Agent settings:
Access:
Any
Step 1
On the computer where you installed the agent, select
Start > Programs > Sourcefire > Configure User Agent
.