Enterasys Security Information and Event Manager, Configuration Manual

Page: 187 / 426

Configuring DSMs
Juniper DX Application Acceleration Platform 171
Juniper DX
Application
Acceleration
Platform
The Juniper DX Application Acceleration Platforms off-load core networking and
I/O responsibilities from web and application servers to improve the performance
of web-based applications, increasing productivity of local, remote, and mobile
users. A SIEM Juniper DX Application Acceleration Platform DSM accepts events
using syslog. SIEM records all relevant status and network condition events.
Before configuring a Juniper DX device in SIEM, you must configure your device to
send syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Juniper DX user interface.
Step 2
Browse to the desired cluster configuration (Services – Cluster Name), Logging
section.
Step 3
Select the Enable Logging check box.
Step 4
Select the desired Log Format.
SIEM supports Juniper DX logs using the common and perf2 formats only.
Step 5
Select the desired Log Delimiter format.
SIEM supports comma delimited logs only.
Step 6
In the Log Host section type the IP address of your SIEM system.
Step 7
In the Log Port section, type the UDP port on which you wish to export logs.
Step 8
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Juniper DX Application Acceleration
Platform:

From the Log Source Type drop-down list box, select the Juniper DX
Application Acceleration Platform option.
For more information on configuring log sources, see the Log Sources User Guide .
Juniper EX-Series
Ethernet Switch
A SIEM Juniper EX-Series Ethernet Switch DSM accepts events using syslog. The
SIEM Juniper EX-Series Ethernet Switch DSM supports Juniper EX-Series
Ethernet Switches running JunOS. Before you configure SIEM to integrate with a
Juniper EX-Series Ethernet Switch, you must forward syslog to your SIEM system.
To configure a Juniper EX-Series Ethernet Switch to forward syslog to SIEM:
Step 1
Log in to the Juniper EX-Series Ethernet Switch command line interface (CLI).
Step 2
Type the following command:
configure
Step 3
Type the following command:
set system syslog host <IP address> <option> <level>
Where: