is heavy forwarder in required to install for mcafee integration

[itishree123]

for mcafee integration i need to install dbconnect but heavy forwarder is required or how we can send logs to splunk

[PavelP]

Hello @itishree123

Do you mean McAfee ePo? It can both send events via syslog+tls and you can access ePo SQL DB using DB Connect, you either need a UF with a syslog server or a HF with DB Connect