hmLoadTopic({
hmKeywords:"Izvoz dnevnika u Syslog",
hmTitle:"Izvoz dnevnika u Syslog",
hmDescription:"ESET PROTECT On-Prem može izvesti određene zapise i događaje na vaš Syslog server. Događaji se generiraju na bilo kojem upravljanom klijentskom računalu na kojem se nalazi...",
hmPrevLink:"automatically_pair_found_computers.html",
hmNextLink:"events-exported-to-json-format.html",
hmParentLink:"admin_server_settings.html",
hmBreadCrumbs:"<a href=\"using.html\">Upotreba sustava ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Glavni izbornik<\/a> &gt; Više &gt; <a href=\"admin_server_settings.html\">Postavke<\/a>",
hmTitlePath:"Upotreba sustava ESET PROTECT On-Prem > ESET PROTECT On-Prem Glavni izbornik > Više > Postavke > Izvoz dnevnika u Syslog",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Izvoz dnevnika u Syslog<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">ESET PROTECT On-Prem može izvesti određene zapise i događaje na vaš Syslog server. Događaji se generiraju na bilo kojem upravljanom klijentskom računalu na kojem se nalazi ESET-ova aplikacija (na primjer ESET Endpoint Security). Ti događaji mogu se obraditi bilo kojim SIEM (Security Information and Event Management) rješenjem koje podržava uvoz iz Syslog servera. ESET PROTECT On-Prem šalje događaje Syslog serveru.<\/p>\n\r<p class=\"p_Normal\">Slijedite korake u nastavku za konfiguraciju Syslog poslužitelja:<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>Idite na <span class=\"f_UI\">Više<\/span> &gt; <span class=\"f_UI\">Postavke<\/span> &gt; <span class=\"f_UI\">Izvezi<\/span> &gt; <span class=\"f_UI\">Dodaj Syslog server<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Napomena\" title=\"Napomena\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Možete konfigurirati do pet Syslog servera.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>Omogućite <span class=\"f_UI\">postavke Omogući syslog za slanje događaja<\/span> kako biste omogućili Syslog poslužitelj konfiguriran u nastavku.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_UI\">U postavkama dnevnika<\/span> odaberite kategorije dnevnika iz kojih će se zapisi događaja izvoziti na Syslog poslužitelj:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"threats.html\" class=\"topiclink\">Detekcija<\/a>—Konfigurirajte ESET PROTECT poslužitelj da šalje sljedeće kategorije detekcije vašem Syslog poslužitelju: <\/span><span class=\"f_UI\">Antivirus<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_UI\">vatrozid,<\/span><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">HIPS,<\/span><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">zaštita weba<\/span><span class=\"f_NormalList\"> (filtrirane web stranice), <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">blokirane datoteke<\/a> i <a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect<\/a>.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"audit_log.html\" class=\"topiclink\">Revizija<\/a>—Konfigurirajte ESET PROTECT poslužitelj da šalje <a href=\"audit_log.html\" class=\"topiclink\">revizijske zapise<\/a> na vaš Syslog poslužitelj.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><a href=\"admin_ntf_manage.html\" class=\"topiclink\">Obavijest<\/a> – Isto tako možete konfigurirati ESET PROTECT server tako da šalje <a href=\"admin_ntf_manage.html\" class=\"topiclink\">Obavijesti<\/a> na vaš Syslog server. Definirajte filtar u <a href=\"admin_notif_events_on.html\" class=\"topiclink\">kategoriji dnevnika obavijesti<\/a> za filtriranje dnevnika događaja poslanih Syslogu.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Napomena\" title=\"Napomena\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Ne možete koristiti Syslog za obavijesti s drugim događajima jer formati nisu kompatibilni. Obavijesti se šalju u običnom tekstualnom formatu.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"VAŽNO\" title=\"VAŽNO\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">Korisnici Sysloga imaju pristup svim izvezetim zapisima. Sve poruke dnevnika provjere izvezene su u Syslog.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>Specificirajte <span class=\"f_UI\">Host<\/span>—IP adresu ili naziv računala za Syslog poslužitelj.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>Upišite broj <span class=\"f_UI\">Porta<\/span> —zadana vrijednost je 514.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span><span class=\"f_UI\">Odaberite verziju<\/span>—<span class=\"f_UI\">BSD<\/span> (<a href=\"https:\/\/tools.ietf.org\/html\/rfc3164\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">specifikacija<\/a>) ili <span class=\"f_UI\">Syslog<\/span> (<a href=\"https:\/\/tools.ietf.org\/html\/rfc5424\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">specifikacija<\/a>).<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>U <span class=\"f_UI\">Formatu<\/span> odaberite format dnevnika događaja:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Napomena\" title=\"Napomena\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Obavijesti se šalju u običnom tekstualnom formatu.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"events-exported-to-json-format.html\" class=\"topiclink\">JSON<\/a> (JavaScript Object Notation)<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\"><a href=\"events_exported_to_cef_format.html\" class=\"topiclink\">CEF<\/a> (Common Event Format)—format razvijen od strane ArcSight.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><a href=\"events-exported-to-leef-format.html\" class=\"topiclink\">LEEF<\/a> (Prošireni format događaja iz dnevnika) – format koji upotrebljava IBM-ova aplikacija QRadar.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">8.<\/span>Odaberite <span class=\"f_UI\">Protokol „Prijenos”<\/span> za slanje poruka na Syslog (<span class=\"f_UI\">UDP<\/span>, <span class=\"f_UI\">TCP<\/span>, <span class=\"f_UI\"><a href=\"advanced_security.html\" class=\"topiclink\">TLS<\/a><\/span>)<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">9.<\/span>Opcionalno, možete omogućiti <span class=\"f_UI\">Octet-counted frame.<\/span> Kada je omogućena, svaka Syslog poruka prenesena preko TLS-a ima prefiks duljine u oktetima (bajtovima), što omogućuje sustavu prijemnika da odredi duljinu poruke (<a href=\"https:\/\/datatracker.ietf.org\/doc\/html\/rfc5425#section-4.3.1\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">specifikaciju<\/a>).<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">10.<\/span> Kliknite <span class=\"f_UI\">Završi<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Napomena\" title=\"Napomena\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Redovna datoteka dnevnika prijave kontinuirano se ažurira. Syslog izvozi samo određene asinkrone događaje, poput obavijesti ili raznih događaja na klijentskim računalima.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Za prilagodbu opčjenosti zapisivanja kliknite <span class=\"f_UI\">na Više<\/span> &gt; <span class=\"f_UI\">postavki<\/span> &gt; <span class=\"f_UI\">Napredno<\/span> &gt; <span class=\"f_UI\">praćenje praćenja<\/span> &gt; <span class=\"f_UI\">loga opčjenosti<\/span>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">U<\/span> &gt; <span class=\"f_UI\"><a href=\"admin_server_settings.html#export\" class=\"topiclink\">Izvozu<\/a><\/span> <span class=\"f_UI\">Više postavki<\/span> &gt; možete vidjeti i urediti popis konfiguriranih Syslog servera. Kliknite na ikonu s tri točke<img alt=\"Više\" title=\"Više\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_more_vertical.png\"\/>pored konfiguriranog Syslog poslužitelja i odaberite:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Uredi.\" title=\"Uredi.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/edit_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Uredi<\/span><span class=\"f_NormalList\">—Uredi odabranu konfiguraciju Syslog servera.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Izbriši.\" title=\"Izbriši.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/delete_default.png\"\/> <span class=\"f_UI\">Izbriši<\/span>—Ukloni odabranu konfiguraciju Syslog poslužitelja.<\/p>"
})
