Enterasys Security Information and Event Manager, Configuration Manual

Page: 112 / 426

Configuring DSMs
96 E
NTERASYS
Enterasys Matrix
K/N/S Series Switch
A SIEM Enterasys Matrix Series DSM accepts events using syslog. SIEM records
all relevant Matrix K-Series, N-Series, or S-Series standalone device events.
Before you configure SIEM to integrate with a Matrix K-Series, N-Series, or
S-Series, you must:
Step 1
Log in to your Enterasys Matrix device command line interface (CLI).
Step 2
Type the following commands:
set logging server 1 ip-addr <IP Address of Event Processor>
state enable
set logging application RtrAcl level 8
set logging application CLI level 8
set logging application SNMP level 8
set logging application Webview level 8
set logging application System level 8
set logging application RtrFe level 8
set logging application Trace level 8
set logging application RtrLSNat level 8
set logging application FlowLimt level 8
set logging application UPN level 8
set logging application AAA level 8
set logging application Router level 8
set logging application AddrNtfy level 8
set logging application OSPF level 8
set logging application VRRP level 8
set logging application RtrArpProc level 8
set logging application LACP level 8
set logging application RtrNat level 8
set logging application RtrTwcb level 8
set logging application HostDoS level 8
set policy syslog extended-format enable
For more information on configuring the Matrix Series routers or switches, consult
your vendor documentation.
Step 3
You are now ready to configure the log sources in SIEM.