Enterasys Security Information and Event Manager, Configuration Manual

Page: 108 / 426

Configuring DSMs
92 E
NTERASYS
To configure SIEM to receive events from the Enterasys HiPath Wireless
Controller device:

From the Log Source Type drop-down list box, select the Enterasys HiPath
option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Enterasys HiPath Wireless Controller device, see
your vendor documentation.
Enterasys
Stackable and
Standalone
Switches
The Enterasys Stackable and Standalone Switches DSM accepts events using
syslog. SIEM records all relevant events. Before configuring an Enterasys
Stackable and Standalone Switches device in SIEM, you must configure your
device to send syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Enterasys Stackable and Standalone Switch device.
Step 2
Type the following command:
set logging server <index> [ip-addr <IP address>] [facility
<facility>] [severity <severity>] [descr <description>] [port
<port>] [state <enable | disable>]
Where:
<index>
is the server table index number (1 to 8) for this server.
<ip address> is the IP address of the server you wish to send
syslog messages. This is an optional field.
If you do not define an IP
address, an entry in the Syslog server table is created with the specified index
number and a message is displayed indicating that no IP address has been
assigned.
<facility>
is a syslog facility. Valid values are
local0
to
local7
. This is an
optional field. If not specified, the default value configured with the set logging
default command is applied.
<severity>
is the server severity level that the server will log messages. The
valid range is 1 to 8. If not specified, the default value configured with the set
logging default command is applied. This is an optional field. Valid values include:
- 1: Emergencies (system is unusable)
- 2: Alerts (immediate action required)
- 3: Critical conditions
- 4: Error conditions
- 5: Warning conditions
- 6: Notifications (significant conditions)
- 7: Informational messages