Cisco Cisco Firepower Management Center 2000

Seite von 32
 
2-17
FireSIGHT User Agent Configuration Guide
 
Chapter 2      Setting up a User Agent
  Configuring a User Agent
Note
Only select this option when Support directs you to do so.
Step 3
Select 
Log Messages to Windows Application Log 
to log non-debug status messages to both the Windows 
application logs and the local event logs.
To view the Windows application logs, open the Windows Event Viewer.
Step 4
Select a time period from the 
Message Cache Size
 drop-down list to configure how long status messages 
are saved before they are automatically deleted from the local event log. 
Status messages, once logged to the local event log, are saved for the time period selected in the 
Message 
Cache Size
 drop-down list, then deleted.
Note
The 
Message Cache Size
 setting only affects the local event log, not the Windows application logs, 
even if you select 
Log Messages to Windows Application Log
.
Step 5
Click Refresh to view new status messages logged since the last refresh.
If new status messages have been logged since the last refresh, a note displays stating there are new status 
messages available. If the refresh results in more than 250 messages displayed, the oldest status 
messages are removed from the 
Logs
 tab. To view more than 250 messages, export the logs. See step 
 
for more information.
Step 6
Click 
Export Logs
 to export the local event log contents to a comma-separated value file.
The comma-separated value file contains all event log status messages and debug messages.
Step 7
Click 
Clear Event Log
 to remove all non-debug status messages from the local event log.
The local event is cleared, except for a status message stating the agent removed the messages.
Step 8
To save and apply configuration changes to the agent, click 
Save
.
The updated settings are applied to the agent.
Step 9
You have the following options:
  •
To configure general agent settings, select the 
General 
tab. For more information, see 
.
  •
To configure the agent, you can take any of the actions described in 
.
Configuring General User Agent Settings
License: 
FireSIGHT
The General tab contains basic User Agent configuration. You can change the agent name reported to 
the Defense Center when the agent reports login data. You can also start and stop the agent service, 
change the logoff check frequency, and view the current service status. 
To configure general User Agent settings:
Access: 
Any
Step 1
On the computer where you installed the agent, select 
Start > Programs > Sourcefire > Configure User Agent
.