When you configure your CrushFTP to send log data to USM Appliance, you can use the CrushFTP plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
| Device | Details |
|---|---|
| Vendor | CrushFTP |
| Device Type | FTP Server |
| Connection Type | Syslog |
| Data Source Name | CrushFTP |
| Data Source ID | 1903 |
Integrating CrushFTP
Before you configure the CrushFTP integration, you must have the IP address of the USM Appliance Sensor.
To configure CrushFTP to send syslog messages to USM Appliance
- From the CrushFTP web UI, open the Logging tab page.
- In the Logging Provider field, select SysLog from the drop-down menu.
- In the UDP Port Number field, enter 514.
- In the Host field, enter the USM Appliance IP address.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
https://www.crushftp.com/crush10wiki/
For troubleshooting, refer to the vendor documentation:
Feedback