Enterasys Security Information and Event Manager, Configuration Manual

Page: 118 / 426

Configuring DSMs
102 F5 N
ETWORKS
bigpipe syslog remote server {BIGIPsyslog {host 10.100.100.100}}
Step 3
Save the configuration changes:
bigpipe save
NOTE
F5 Networks modified the syslog output format in BIG-IP v10.x to include the use
of
local/
before the hostname in the syslog header. The syslog header format
containing
local/
is not supported in SIEM, but a workaround is available to
correct the syslog header.
Step 4
You are now ready to configure the log sources and protocol within SIEM:
To configure SIEM to receive events from an F5 Networks BIG-IP device:

From the Log Source Type drop-down list box, select the F5 Networks
BIG-IP LTM option For more information on configuring log sources, see the
Log Sources User Guide .
For more information on adding remote syslog sources, see your F5 Networks
BIG-IP LTM product documentation.
Configuring Remote
Syslog for F5 BIG-IP
LTM 9.4.2 to 9.4.8
To configure syslog for F5 BIG-IP LTM 9.4.2 to 9.4.8:
Step 1
Log in to the command line of your F5 BIG-IP device.
Step 2
Type the following command to add a single remote syslog server:
bigpipe syslog remote server <IP Address>
Where
<IP Address>
is the IP address of SIEM.
For example:
bigpipe syslog remote server 10.100.100.100
Step 3
Type the following to save the configuration changes:
bigpipe save
Step 4
You are now ready to configure the log sources and protocol within SIEM:
To configure SIEM to receive events from an F5 Networks BIG-IP device:

From the Log Source Type drop-down list box, select the F5 Networks
BIG-IP LTM option For more information on configuring log sources, see the
Log Sources User Guide .
For more information on adding remote syslog sources, see your F5 Networks
BIG-IP LTM product documentation.