When you configure your WatchGuard XCS to send log data to USM Appliance, you can use the WatchGuard XCS plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
|Data Source Name
|Data Source ID
Integrating WatchGuard XCS
Before you configure the WatchGuard XCS integration, you must have the IP Address of the USM Appliance Sensor.
To configure WatchGuard XCS to send log messages to USM Appliance
- From the WatchGuard XCS web UI, select Configuration > Network > Interfaces.
- In the Syslog Server field, enter the USM Appliance IP address.
- Click Apply.
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
For troubleshooting, refer to the vendor documentation: