Enterasys Security Information and Event Manager, Configuration Manual

Page: 188 / 426

Configuring DSMs
172 J
UNIPER
N
ETWORKS
<IP address>
is the IP address of your SIEM system.
<level>
is info, error, warning, or any,
<option>
is one of the following options from Table 36-5 .
For example:
set system syslog host 10.77.12.12 firewall info
Configures the Juniper EX-Series Ethernet Switch to send info messages from
firewall filtering systems to your SIEM system.
Step 4
Repeat Step 3 to configure any additional syslog destinations and options. Each
additional option must be identified using a separate syslog destination
configuration.
Step 5
You are now ready to configure the Juniper EX-Series Ethernet Switch in SIEM.
To configure SIEM to receive events from a Juniper EX-Series Ethernet Switch:

From the Log Source Type drop-down list box. select Juniper EX-Series
Ethernet Switch option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Juniper switch, see your vendor documentation.
Table 36-5 Juniper Networks Ex-Series Switch Options
Option Description
any All facilities
authorization Authorization system
change-log Configuration change log
conflict-log Configuration conflict log
daemon Various system processes
dfc Dynamic flow capture
explicit-priority Include priority and facility in messages
external Local external applications
facility-override Alternate facility for logging to remote host
firewall Firewall filtering system
ftp FTP process
interactive-commands Commands executed by the UI
kernel Kernel
log-prefix Prefix for all logging to this host
match Regular expression for lines to be logged
pfe Packet Forwarding Engine
user User processes