Apache Tomcat v1.0.11

Modeling Rules for the Apache Tomcat logs collector

Author:: Cortex XSOAR
Support:: xsoar
URL:: https://www.paloaltonetworks.com/cortex

xsiam

Analytics & SIEM

Modeling rules (2)

Parsing rules (1)

Apache Tomcat Parsing Rule

README

Broker VM

You will need to use the information described here.\
You can configure the specific vendor and product for this instance.

Navigate to Settings -> Configuration -> Data Broker -> Broker VMs.
Right-click, and select Syslog Collector -> Configure.
When configuring the Syslog Collector, set:
- vendor as vendor<- Apache
- product as product<- tomcat