Symantec Developer Group

 View Only

SSIM 4.8.1 - How to configure servers to be Collector, Archiver and Correlator

  • 1.  SSIM 4.8.1 - How to configure servers to be Collector, Archiver and Correlator

    Posted Jun 01, 2015 04:50 PM

    Hi,

    I'm installing SSIM 4.8.1 on 7 Virtual servers. My goal is to have 3 Collector servers, 2 Archivers and 2 Correlators.

    I just installed the image as well as the 7 Security Patches and the Patch10.

    I also set License, host files, created self-signed cert and set the NTP.

    Can someone please guide me through the rest... I believe I would need to register all servers into a Directory Master and then setup Forwarding, Storage and Correlation rules for each server, right?!

    Any good documentation will be apreciated.

    Thanks.