Configuring Secret Server Cloud

This section describes how to enable logging in Delinea Secret Server Cloud (SSC). Secret Server Cloud cannot directly send syslog or CEF logs to IBM QRadar. Audit events are forwarded to QRadar through a Distributed Engine installed on-premises.

1. Log in to Secret Server as Administrator.

2. Navigate to Admin > Configuration.

3. Scroll to the bottom and click Edit to start editing the configuration.

4. Select the Enable Web services checkbox

5. Configure Syslog/CEF Logging:

   1. Go to Syslog / CEF Logging Advanced Settings

   2. Select the Enable Syslog/CEF Logging checkbox.

   3. Enter the hostname or IP address of the Distributed Engine.

   4. Enter Port number 6514 (for TLS)

   5. Select Protocol (TCP for TLS connections)

6. Click Save.