CollectorsCloud Collectors Administration Guide

Before you configure the Mimecast Incydr Cloud Collector, ensure that you complete the prerequisites.

Log in to the New-Scale Security Operations Platform with your registered credentials as an administrator.

Navigate to Collectors > Cloud Collectors.

Click New Collector.

Click Mimecast Incydr.

Enter the following information for the cloud collector.

1. NAME – Specify a name for the Mimecast Incydr Cloud Collector.

2. CLIENT ID – Enter the client ID that you obtained while completing prerequisites .

3. CLIENT SECRET – Enter the client secret that you obtained while completing prerequisites.

4. REGION – Select the same region as that of the endpoint region for Mimecast Incydr.

5. DATA SOURCES – Select the data sources from which you want to collect data: File events.

6. INGEST FROM – Select the time and date from which the collector must start ingesting events. If you leave this field blank and do not provide a threshold, all logs are ingested.

(Optional) SITE – Select an existing site or to create a new site with a unique ID, click manage your sites. Adding a site name helps you to ensure efficient management of environments with overlapping IP addresses.

By entering a site name, you associate the logs with a specific independent site. A sitename metadata field is automatically added to all the events that are going to be ingested via this collector. For more information about Site Management, see Define a Unique Site Name.

(Optional) TIMEZONE – Select a time zone applicable to you for accurate detections and event monitoring.

By entering a time zone, you override the default log time zone. A timezone metadata field is automatically added to all events ingested through this collector.

To confirm that the New-Scale Security Operations Platform communicates with the service, click Test Connection. 

Click Install.

A confirmation message informs you that the new Cloud Collector is created.