Setting up automatic log collection

Automatic log collection can be configured using a downloadable OVA, Syslog-ng, or Rsyslog. You can select the option that works best for you and follow the steps for installation. You will only need to setup one option to successfully stream logs to Forcepoint ONE SSE for ShadowIT Discovery.

Important: Downloaded certificate ISO has 12 hours lifetime within which the OVA needs to be successfully configured in vCenter as per the steps in Configuring downloadable OVA. If the OVA is not configured within 12 hours of certificate ISO download, then you need to re-download and re-install certificate ISO to configure OVA.