Cryptographic Security Platform provides the Log Forwarder solution for forwarding logs to a Splunk SIEM (Security Information and Event Management) server. 

To configure and deploy the Log Forwarder solution

  1. Open the following URL in a Web browser. 

    https://<machine>/management-console

    Where <machine> is the IP address or domain name of the machine hosting Cryptographic Security Platform.

  2. Log into the Management Console a user belonging to a role with Log Forwarder management permissions – for example, the initial admin administrator user. 

    See Starting up the Management Console for how to manage users and roles.

  3. In the content pane, click Manage Solution under Entrust Log Forwarder.
  4. Activate the Import configuration toggle switch if you want to import configuration settings from a file, such as a sample configuration file included in the product release.
  5. Active the Enable Advanced Configuration if you want to configure the full set of configuration parameters supported by the solution.
  6. Click Next.
  7. Configure the solution settings described in the following sections. 
  1. Click Validate to validate the configured settings. 
  2. Correct any detected configuration error until the Validate option displays no warnings.
  3. Optionally, click the Download button to export the current configuration. You can later import this configuration with the already mentioned Import configuration toggle switch.
  4. Click Submit and wait while Cryptographic Security Platform uploads the configuration and any attached file, such as a P12 file with authentication credentials.
  5. Click Deploy.