Skip to content

Commit 1a51fea

Browse files
committed
Fix broadcom file again
1 parent fa82483 commit 1a51fea

File tree

2 files changed

+12
-121
lines changed

2 files changed

+12
-121
lines changed

articles/sentinel/data-connectors/braodcom-symantec-dlp (2).md

Lines changed: 0 additions & 106 deletions
This file was deleted.

articles/sentinel/data-connectors/braodcom-symantec-dlp.md

Lines changed: 12 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,23 @@
11
---
2-
title: "Braodcom Symantec DLP connector for Microsoft Sentinel"
3-
description: "Learn how to install the connector Braodcom Symantec DLP to connect your data source to Microsoft Sentinel."
2+
title: "Broadcom Symantec DLP connector for Microsoft Sentinel"
3+
description: "Learn how to install the connector Broadcom Symantec DLP to connect your data source to Microsoft Sentinel."
44
author: cwatson-cat
55
ms.topic: how-to
6-
ms.date: 02/23/2023
6+
ms.date: 03/25/2023
77
ms.service: microsoft-sentinel
88
ms.author: cwatson
99
---
1010

11-
# Braodcom Symantec DLP connector for Microsoft Sentinel
11+
# Broadcom Symantec DLP connector for Microsoft Sentinel
1212

13-
The [Broadcom Symantec Data Loss Prevention (DLP)](https://www.broadcom.com/products/cyber-security/information-protection/data-loss-prevention) connector allows you to easily connect your Symantec DLP with Azure Sentinel, to create custom dashboards, alerts, and improve investigation. This gives you more insight into your organization’s information, where it travels, and improves your security operation capabilities.
13+
The [Broadcom Symantec Data Loss Prevention (DLP)](https://www.broadcom.com/products/cyber-security/information-protection/data-loss-prevention) connector allows you to easily connect your Symantec DLP with Microsoft Sentinel, to create custom dashboards, alerts, and improve investigation. This gives you more insight into your organization’s information, where it travels, and improves your security operation capabilities.
1414

1515
## Connector attributes
1616

1717
| Connector attribute | Description |
1818
| --- | --- |
19-
| **Kusto function alias** | SymantecDLP |
20-
| **Kusto function url** | https://aka.ms/sentinel-symantecdlp-parser |
2119
| **Log Analytics table(s)** | CommonSecurityLog (SymantecDLP)<br/> |
22-
| **Data collection rules support** | [Workspace transform DCR](../../azure-monitor/logs/tutorial-workspace-transformations-portal.md) |
20+
| **Data collection rules support** | [Workspace transform DCR](/azure/azure-monitor/logs/tutorial-workspace-transformations-portal) |
2321
| **Supported by** | [Microsoft Corporation](https://support.microsoft.com) |
2422

2523
## Query samples
@@ -43,25 +41,24 @@ SymantecDLP
4341
```
4442

4543

46-
4744
## Vendor installation instructions
4845

4946

50-
>This data connector depends on a parser based on a Kusto Function to work as expected. [Follow the steps](https://aka.ms/sentinel-symantecdlp-parser) to use the Kusto function alias, **SymantecDLP**
47+
**NOTE:** This data connector depends on a parser based on a Kusto Function to work as expected which is deployed as part of the solution. To view the function code in Log Analytics, open Log Analytics/Microsoft Sentinel Logs blade, click Functions and search for the alias SymantecDLP and load the function code or click [here](https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Broadcom%20SymantecDLP/Parsers/SymantecDLP.txt). The function usually takes 10-15 minutes to activate after solution installation/update.
5148

5249
1. Linux Syslog agent configuration
5350

54-
Install and configure the Linux agent to collect your Common Event Format (CEF) Syslog messages and forward them to Azure Sentinel.
51+
Install and configure the Linux agent to collect your Common Event Format (CEF) Syslog messages and forward them to Microsoft Sentinel.
5552

5653
> Notice that the data from all regions will be stored in the selected workspace
5754
5855
1.1 Select or create a Linux machine
5956

60-
Select or create a Linux machine that Azure Sentinel will use as the proxy between your security solution and Azure Sentinel this machine can be on your on-prem environment, Azure or other clouds.
57+
Select or create a Linux machine that Microsoft Sentinel will use as the proxy between your security solution and Microsoft Sentinel this machine can be on your on-prem environment, Azure or other clouds.
6158

6259
1.2 Install the CEF collector on the Linux machine
6360

64-
Install the Microsoft Monitoring Agent on your Linux machine and configure the machine to listen on the necessary port and forward messages to your Azure Sentinel workspace. The CEF collector collects CEF messages on port 514 TCP.
61+
Install the Microsoft Monitoring Agent on your Linux machine and configure the machine to listen on the necessary port and forward messages to your Microsoft Sentinel workspace. The CEF collector collects CEF messages on port 514 TCP.
6562

6663
> 1. Make sure that you have Python on your machine using the following command: python –version.
6764
@@ -73,7 +70,7 @@ Install the Microsoft Monitoring Agent on your Linux machine and configure the m
7370

7471
2. Forward Symantec DLP logs to a Syslog agent
7572

76-
Configure Symantec DLP to forward Syslog messages in CEF format to your Azure Sentinel workspace via the Syslog agent.
73+
Configure Symantec DLP to forward Syslog messages in CEF format to your Microsoft Sentinel workspace via the Syslog agent.
7774
1. [Follow these instructions](https://help.symantec.com/cs/DLP15.7/DLP/v27591174_v133697641/Configuring-the-Log-to-a-Syslog-Server-action?locale=EN_US) to configure the Symantec DLP to forward syslog
7875
2. Use the IP address or hostname for the Linux device with the Linux agent installed as the Destination IP address.
7976

@@ -106,4 +103,4 @@ Make sure to configure the machine's security according to your organization's s
106103

107104
## Next steps
108105

109-
For more information, go to the [related solution](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/azuresentinel.azure-sentinel-solution-broadcomsymantecdlp?tab=Overview) in the Azure Marketplace.
106+
For more information, go to the [related solution](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/azuresentinel.azure-sentinel-solution-broadcomsymantecdlp?tab=Overview) in the Azure Marketplace.

0 commit comments

Comments
 (0)