Documentation Center
AlienVault® USM Appliance™

Configuring Log Collection and Scanning

Applies to Product: USM Appliance™ AlienVault OSSIM®

To configure log collection and scanning

  1. Choose the network interface that will be used for log collection and scanning.
  2. Select "Log Collection & Scanning" from the list. 

    A screen pops up asking for an IP address and netmask. This information will be used to configure the network interface with a static IP address.

  3. On the IP Address & Netmask box, enter an IP address and netmask for a different subnet.

    The Configure Network Interfaces screen displays again. The IP address you supplied shows as the IP address for the interface.  This indicates that the interface configuration is successful.

  4. Configure the other interfaces as needed for additional log collection and scanning.

    Note: In some situations the network that you want to monitor may not be accessible from the IP address provided without setting up a route in the routing table.  This is an extreme case and should not happen often.  If a route is required, you will need to jailbreak the system using the AlienVault console and configure the route using the command line.

    After you have finished configuring the network interfaces, click Next at the bottom-right corner to proceed.