In the Cylance tenant page, click Settings > Application.
Do the following:
Check the Syslog/SIEM box.
Check the boxes for all event types.
In SIEM, select HP Arcsight.
In Protocol, select TCP.
Check the TLS/SSL box.
In IP/Domain, select
cy-event.skout-build.com
.
Click Test Connection. Look for a green confirmation notice.
Once the above changes are made and saved, contact Barracuda XDR so the logs can be verified. If everything is working, the Cylance datasource appears on the dashboard within 1 – 2 hours.
Barracuda XDR