Configuring receipt of Codemaster Mirada events

You can configure the receipt of Codemaster Mirada events in the KUMA

SIEM system

SIEM system (Security Information and Event Management) is a solution for managing information and events in the organization security system.

Configuring event receiving consists of the following steps:

1. Configuring audit of the Codemaster Mirada system.
2. Creating a KUMA collector for receiving Codemaster Mirada events.

   To receive Codemaster Mirada, in the Collector Installation Wizard, at the Event parsing step, select the [OOTB] Codemaster Mirada syslog normalizer, and at the Transport step, select the tcp or udp connector type.

3. Installing a collector in the KUMA network infrastructure.
4. Verifying receipt of Codemaster Mirada events in the KUMA collector

   You can verify that the Codemaster Mirada event source server is correctly configured in the Events section of the KUMA Console.

Configuring audit of the Codemaster Mirada system

The Codemaster Mirada system can send events over the Syslog protocol.

To configure event audit in the Codemaster Mirada system:

1. Connect to the Codemaster Mirada web interface under a user account that has administrative privileges.
2. Go to the Settings → Syslog section.
3. Enable the event transmission service using the toggle switch.
4. Select the type and format of the protocol by clicking the dot-in-a-circle icon.
5. In the Host field, specify the IP address of the KUMA collector.
6. In the Protocol field, specify the UDP or TCP transport protocol.
7. In the Port field, specify the port that the KUMA collector is listening on.

   The default port is 514.

8. In the Format field, specify the RFC 3164 standard.
9. Click Save in the lower part of the page to save the changes.