Add Custom Device Or Application As Reporting Device - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 15 Configuring Custom Devices
Figure 15-18
Once the log template is defined and submitted, you must define a reporting device based on the custom
device.

Add Custom Device or Application as Reporting Device

Adding the new custom device or application is similar as adding predefined device or application. The
type of device that you create depends on whether it was defined as a custom appliance or software
device. If it is software-based, you must first define a host and then add a reporting application.
Otherwise, you can select the appliance type directly from the Device Type list.
The following example adds an instance of the newly defined Apache Webserver1.1 software
application.
Go to the Admin tab.
Step 1
Click the Security and Monitor Devices.
Step 2
Step 3 Click Add to add a new device.
From the Device Type list, select Add SW security apps on a new host.
Step 4
Fill in name and other host details and click Apply.
Step 5
Click on Reporting Applications.
Step 6
Select Application (e.g., Apache Webserver.1.1) from the list and click Add.
Step 7
78-17020-01
User Defined Log Parser for Apache Webserver1.1
Adding User Defined Log Parser Templates
User Guide for Cisco Security MARS Local Controller
15-13