FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 195336
Description

How to configure the Collector Server for a Mac agent


Scope

Installation and Administration


Solution

After installing the ZoneFox agent on a Mac machine, the details for the Collector Server can be changed to a different single URL:


    sudo defaults write com.inquisitivesystems.collectormanager ServerURL -string https://zf-01.example.com:8080/api/


or be changed to a list of URLs for multiple Collector Servers, which the agent will try to connect to in a round robin style:


    sudo defaults write com.inquisitivesystems.collectormanager ServerURL -array -string https://zf-01.example.com:8080/api/  
    -string https://zf-02.example.com:8080/api/  -string https://zf-03.example.com:8080/api/


After making any changes to the configuration, the agent daemon process should be stopped and restarted to pick up the new setting, using the following commands:


    sudo launchctl unload /Library/LaunchDaemons/com.inquisitivesystems.CollectorManager.daemon.plist

    sudo launchctl load /Library/LaunchDaemons/com.inquisitivesystems.CollectorManager.daemon.plist


Contributors