Skip to main content

Site CollectorSite Collector Administration Guide

Modify the Windows Event Log Collector Configuration

In the Overview section in addition to viewing the status, trend, last day volume, and collector name, you can modify the Collector configuration by clicking the Collector instance. To modify the configuration for the Windows Event Log Collector instance:

  1. On the Exabeam Security Operations Platform home page, click the Collectors tile.

  2. Select Site Collectors from the sub-menu.

    The Overview section displays status groups, last day total volume, and a list of Site Collectors.

  3. On the Overview tab, click the Windows Event Log Collector instance for which you want to modify the configuration.

    WELC_edit1.png

    Alternatively, click Edit configuration.

    WELC_edit2.png

  4. In the Data section, you can select another Windows template.

    WELC_data.png

  5. In the Installation section, you can download the security certificates.

    WELC_edit3_-_Copy.png

  6. After you complete the updates, click Update.

  7. To stop or delete the Windows Event Log Collector instance, in the upper right corner, click Stop or Delete.

    WELC_edit3.png

    Note

    You can start a Collector instance that is stopped, by clicking Restart.

    You can delete a Collector of which the status is 'Running'. You can delete a Site Collector instance of which the status is 'Setup Error' or 'Installation Error'.