Skip to content

Commit f509aaf

Browse files
committed
Minor edits
1 parent 5fb07ee commit f509aaf

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

articles/sentinel/connect-cef-verify.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,10 @@ Once you have deployed your log forwarder (in Step 1) and configured your securi
2323

2424
## Prerequisites
2525

26-
- You must have elevated permissions (sudo) on your machine.
26+
- You must have elevated permissions (sudo) on your log forwarder machine.
2727

28-
- Make sure that you have Python on your machine using the following command: `python –version`
28+
- You must have Python installed on your log forwarder machine.<br>
29+
Use the `python –version` command to check.
2930

3031
## How to validate connectivity
3132

@@ -34,7 +35,7 @@ Be aware that it may take about 20 minutes until your logs start to appear in **
3435

3536
1. If you don't see any results from the query, verify that events are being generated from your security solution, or try generating some, and verify they are being forwarded to the Syslog forwarder machine you designated.
3637

37-
1. Run the following script to check connectivity between your security solution, the log forwarder, and Azure Sentinel. This script checks that the daemon is listening on the correct ports, that the forwarding is properly configured, and that nothing is blocking communication between the daemon and the Log Analytics agent. It also sends mock messages 'TestCommonEventFormat' to check end-to-end connectivity. <br>
38+
1. Run the following script on the log forwarder to check connectivity between your security solution, the log forwarder, and Azure Sentinel. This script checks that the daemon is listening on the correct ports, that the forwarding is properly configured, and that nothing is blocking communication between the daemon and the Log Analytics agent. It also sends mock messages 'TestCommonEventFormat' to check end-to-end connectivity. <br>
3839
`sudo wget https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/DataConnectors/CEF/cef_troubleshoot.py&&sudo python cef_troubleshoot.py [WorkspaceID]`
3940

4041
## Validation script explained

0 commit comments

Comments
 (0)