Configure ESET for Arctic Wolf monitoring

You can configure ESET® to send the necessary logs to Arctic Wolf® for security monitoring.

These resources are required:

  • Access to the ESET PROTECT Hub (formerly the ESET Business Account) as a Superuser.
  • ESET PROTECT Cloud and Inspect Cloud. These components are included in ESET PROTECT ELITE and PROTECT MDR.
    Note: Third-party vendors can change their services. You must confirm your licenses with the vendor. For more information about ESET platform tiers, see ESET PROTECT Platform.

Create a new user

  1. Sign in to the ESET PROTECT Hub (formerly the ESET Business Account) as a Superuser.
  2. Click Users, and then click Add User.
  3. On the New user page, in the User information section, fill in the fields as necessary.
  4. Click Next.
  5. In the Permissions section, configure these settings:
    • My company — Select Read access.
    • ESET PROTECT & INSPECT — Select Access.
    • Integrations — Click the toggle to enable data transmission.
  6. Click Next, and then verify the information.
  7. Click Create.

    Look for a confirmation email with a link to use in Activate the new user.

Activate the new user

  1. Click the link that you received in the confirmation email in Create a new user.
  2. Create a new password, and then click Activate the account.
    Wait 10 minutes before proceeding to the next step.
  3. Save the email and password in a safe, encrypted location to provide to Arctic Wolf later.
  4. Sign in to the ESET PROTECT Hub (formerly the ESET Business Account) as the user that you created in Create a new user to activate the account.

Provide ESET credentials to Arctic Wolf

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Data Collection > Cloud Sensors.
  3. Click Add Account +.
  4. On the Add Account page, click ESET.
  5. Configure these settings:

    • Account Name — Enter a unique and descriptive name for the account.

    • Client ID (email) — Enter the email from Activate the new user.
    • Client Secret (password) — Enter the password from Activate the new user.
    • Region Code — Select a region from the list.

    • Credential Expiry — (Optional) Enter the credential expiration date, if applicable.

  6. Click Test and submit credentials.