When you configure CrushFTP to send log data to USM Appliance, you can use the CrushFTP plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
Device | Details |
---|---|
Vendor | CrushFTP |
Device Type | FTP Server |
Connection Type | Syslog |
Data Source Name | CrushFTP |
Data Source ID | 1903 |
Integrating CrushFTP
Before you configure the CrushFTP integration, you must have the IP Address of the USM Appliance Sensor.
To configure CrushFTP to send Syslog messages to USM Appliance
- Open the Logging tab page from the CrushFTP web UI.
- Select SysLog from the drop-down menu in the Logging Provider field.
- Enter 514 in the UDP port number field.
- Enter the USM Appliance IP address in the Host field.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
For troubleshooting, refer to the vendor documentation: