Creating fixlet for my archsight log

[emeka]

Hello all,

I want to create a fixlet that can help me pool out logs from my Linux machines to my SIEM.

If I am to do this manually, the steps will involve the following:

1. Log into the machine.
2. Open the /etc/syslog.conf file.
3. Add *.info@192.168.5.6 to the file
4. Save the file.
5. Restart the service using the command service syslog restart.

Please, How do I automate this tasks using BigFix?

[SLB]

See if the method for appending to the hosts file is re-usable for your use case. Just need to change the file and line being inspected for, and if you prefer, just keep the parts relevant to the Linux platform.

Universal append to hosts file

Does anyone have actionscript to append to host files on all platforms? Mac/Win/UNIX I know that we have examples in old posts for Windows (some of which don’t apply to 64 bit OS’s anymore even) but need to add an entry to a wide array of endpoints

All you may need to then do is add the command to restart the syslog service