Is there a tried and tested way to send Adaxes logs into McAfee Siem?

Question

Hi All,

We are looking at using Adaxes however would like to be able to see the Adaxes logs within McAfee SIEM. Has anyone tried and tested this and could give any insight on the best way to do this?

I understand we can export the logs to CSV and also from SIEM do application monitoring. Does Adaxes have a preferred route to get logs to the SIEM?

Many Thanks!

Answer 1

Hello Anton,

Unfortunately, we did not perform such tests and have no experience working with McAfee SIEM. We recommend you to check the following approaches with McAfee support team:

• By default, Adaxes stores log records in a local SQLite database located on the computer where your Adaxes service is installed. The local database is stored in the AdaxesLog.db3 file located in the LogDB subfolder of the folder where the Adaxes service is installed, which is C:\Program Files\Softerra\Adaxes 3\Service by default. If the SIEM can read data from an SQLite database, you can directly access Adaxes logs stored in the database.
• If the SIEM can read data from an MS SQL database, you can enable logging to an external database and then read the logs from the database.
• If the SIEM accepts syslog messages, you can enable syslog output to the SIEM server in Adaxes: https://www.adaxes.com/help/?Logging.EnableSyslogOutput.html.