LEM includes a connector called Kaspersky Security Center, which reads events directly from the database on your Kaspersky server. You will firstly need to install the LEM agent on your Kaspersky and then configure the connector. You can view the fields below. You will need to assign a name to the connector (e.g. Kaspersky), along with a username/password of a user with access to the Kaspersky database. All other values should not need adjustment, assuming you have not changed the database or instance name and port on the Kaspersky side.
