Once you have installed your TLC Manager, TLC Console, and (optional) Agent software (see About the Installation Process), complete the following steps to configure your TLC environment.
Step 1. Configure your Log Sources
Step 2. Configure your TLC Console
Step 3. Import the Latest Normalization Rules
Step 4. Configure your Asset Groups
Step 5. Configure your Collectors
Step 7. Confirm Log-Message Collection
Step 8. Assign Normalization Rules to Asset Groups
Step 9. Assign Correlation Rules to the Correlation Engine
Step 10. Create and Assign Actions
Step 11. Create and Assign Normalized-Message Fields
Tip |
Rather than completing these steps to configure TLC for all of your Log Sources at once, Tripwire recommends an incremental approach. By completing these steps for one or two types of Log Sources at a time, and then evaluating TLC’s performance and data-storage needs, you can more easily identify and isolate any potential problems. For further assistance, contact Tripwire Professional Services. |
---|