macOS

Applies To: macOS (Sierra, High Sierra, Mojave, Catalina, Big Sur and Monterey)

Overview

EventTracker provides support for devices running Apple’s macOS. EventTracker can extract logs from OS devices and can generate flex reports and triggering alerts due to suspicious activity associated with login/logout activity, authentication failures and any kind of administrator activity.

EventTracker knowledge pack for macOS allows you to monitor the following components:

• Security - User authentication failure.
• Compliance - User and group management, administrative activities and command executed.
• Operation - Login and logout activities, login failure activities, authentication, and authorization.

After macOS is configured to deliver logs to EventTracker manager, alerts, dashboards, and reports can be configured into EventTracker.

1.  
2.  
3.  
4.  
5.  

Previous Next

After macOS is configured to deliver logs to EventTracker manager, alerts, dashboards, and reports can be configured into EventTracker.

Scope

The configuration details in this guide are consistent with EventTracker version 9.3 and later, macOS.

Documentation

To configure macOS to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Integration guide.

Download macOS Log Forwarder v3.2.1 for Integrating macOS with EventTracker.