Up
Previous Next

Sheriff CSM™

Configure Sheriff CSM to Use a DNS

Use of a Domain Name Service (DNS) helps Sheriff CSM to resolve host names against IP addresses. When processing logs from different assets, or hosts, to generate events, if the IP address of the asset can be identified, Sheriff CSM stores it in the Device IP field of the event. This enriches the event data, making searches faster and more accurate. When Sheriff CSM is not able to resolve the host name, it assigns the IP address of the Sheriff CSM Sensor to the Device IP field instead.

To configure Sheriff CSM to use a DNS

1. Connect to the Sheriff Console through SSH and use your credentials to log in.

   The Sheriff Setup menu displays.

2. Select System Preferences.

3. Select Configure Network.

4. Select Name Server (DNS).

5. Type the IP address of the server you want to use. If using more than one server, separate them with a comma without any spaces. For example:

   1.1.1.1,8.8.8.8

6. Press Enter (<OK>).

7. Press <Back> until you are on the Sheriff Setup menu again. Select Apply all Changes.

8. Press <Yes> to confirm.

   Sheriff CSM applies the changes and restarts all the services, which may take several minutes.