Collecting from BitDefender
TeskaLabs LogMan.io can collect BitDefender logs from requests made by BitDefender as specified by the server API documentation: https://www.bitdefender.com/business/support/en/77209-135319-setpusheventsettings.html
Configuring LogMan.io Collector
On the LogMan.io server, where the logs are being forwarded to, run a LogMan.io Collector instance with the following configuration.
In the listen
section, set the appropriate port configured in the Log Forwarding in BitDefender.
BitDefender Server Configuration
input:BitDefender:BitDefenderAPI:
listen: 0.0.0.0 <PORT_SET_IN_FORWARDING> ssl
cert: <PATH_TO_PEM_CERT>
key: <PATH_TO_PEM_KEY_CERT>
cafile: <PATH_TO_PEM_CA_CERT>
encoding: utf-8
output: WebSocketOutput
output:WebSocket:WebSocketOutput:
url: http://<LMIO_SERVER>:<YOUR_PORT>/ws
tenant: <YOUR_TENANT>
debug: false
prepend_meta: false