Configuring your TLC Environment

Once you have installed your TLC Manager, TLC Console, and (optional) Axon Agent software (see About the Installation Process), complete the following steps to configure your TLC environment.

Step 1. Configure your Log Sources

Step 2. Configure your TLC Console

Step 3. Import the Latest Normalization Rules

Step 4. Configure your Asset Groups

Step 5. Configure your Collectors

Step 6. Configure your Monitored Assets

Step 7. Confirm Log-Message Collection

Step 8. Assign Normalization Rules to Asset Groups

Step 9. Assign Correlation Rules to the Correlation Engine

Step 10. Create and Assign Actions

Step 11. Create and Assign Normalized-Message Fields

Tip 

Rather than completing these steps to configure TLC for all of your Log Sources at once, Tripwire recommends an incremental approach. By completing these steps for one or two types of Log Sources at a time, and then evaluating TLC’s performance and data-storage needs, you can more easily identify and isolate any potential problems. For further assistance, contact Tripwire Professional Services.