Views:

In order to contain packet data in the events, do the following on the Deep Security Manager node:

Change the current directory to the installation directory of Deep Security Manager.
```
> cd {Installation Directory of DSM}
```
The default installation paths are as follows:
- Windows: C:\Program Files\Trend Micro\Deep Security Manager\
- Linux:/opt/dsm/

Run the command below:

> dsm_c -action changesetting -name com.trendmicro.ds.network:settings.configuration.sendPacketDataViaDSMSyslog -value true

Once the option is enabled, base64-encoded text packet data can be sent to syslog even when Via the Deep Security Manager is configured.

Keywords: send packet data to dsm,unable to view packet data,sendPacketDataViaDSMSyslog

Sending packet data to syslog via Deep Security Manager (DSM)

Product / Version includes:

Last updated: 2021/08/28

Solution ID: KA-0009693

Category: Configure

Summary

Event forwarding can be configured to either Via the Deep Security Manager or Directly to the Syslog Server.

For Firewall and Intrusion Prevention events, packet data is not stored in the event if the events are sent Via the Deep Security Manager.

In order to contain packet data in the events, do the following on the Deep Security Manager node:

Change the current directory to the installation directory of Deep Security Manager.
```
> cd {Installation Directory of DSM}
```
The default installation paths are as follows:
- Windows: C:\Program Files\Trend Micro\Deep Security Manager\
- Linux:/opt/dsm/

Run the command below:

> dsm_c -action changesetting -name com.trendmicro.ds.network:settings.configuration.sendPacketDataViaDSMSyslog -value true

Once the option is enabled, base64-encoded text packet data can be sent to syslog even when Via the Deep Security Manager is configured.

Was this article helpful?