Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

About the role of the SSIM server

Created: 12 Sep 2012 | 2 comments

I'm considering the introduction of two SSIM server.

I want to set the role of Correlation the SSIM server A.

I want to set the role of Collection/Archiving the SSIM server B.

I think the Correlation and Archiving and Collection role so that it can not be set when you install the SSIM server.

How do I configure the role of each?

I have installed as the manual. I think all-in-one server.
 

Comments 2 CommentsJump to latest comment

Laszlo2's picture

Hi, you can configure this in the Client under the System->Server Configuration tab. On the collection device you have to turn off the Correlation and modify the the Correlation Forwarding under the Event Forwarding Rules. On the correlation device you have to modify the event storage rule and enable the correlation.

 

Regards,

Laszlo

Avkash K's picture

SSIM Role assignement is a post installation procedure.

 

Once you have your SSIM servers installed, you can assign the specific roles(Collection / Archiving / Correlation) from the SSIM Client console.

As suggested by Laszlo2 you can go to  System->Server Configuration tab & have your server assigned with a specific required roles.

 

Regards,

Avkash K