Snare Agent for Windows
The Windows Snare agent collects Windows Event Log data and forwards it over UDP connections with the help of the ProxyServerContainer component of the Devo Agent for Windows.
Before you begin
You should first install and configure the ProxyServerContainer and it must be running when you set up the Snare Agent. See the the Devo Agent for Windows articles for instructions.
Installing the Snare download package
The Snare Agent is available for download from the Snare website. Please follow the vendor instructions to install the agent. When configuring the Snare Agent:
- The Destination parameter is the local IP address where ProxyServerContainer is installed and listening. This should be 127.0.0.1.
- The Port field is ProxyServerContainer's UDP listening port. This is usually 11011.
Check the Guide to Snare for Windows if you need to make any configuration changes after installation (port, shipping address, etc.).