Enterasys Security Information and Event Manager, Configuration Manual

Page: 196 / 426

Configuring DSMs
180 J
UNIPER
N
ETWORKS
For information on configuring PCAP data using a Juniper Networks SRX-series
appliance, see
Configuring Juniper Networks SRX-series PCAP Protocol .
NOTE
For more information about structured-data syslog, see RFC 5424 at the Internet
Engineering Task Force: http://www.ietf.org/
Before you configure SIEM to integrate with a Juniper device, you must forward
data to SIEM using syslog or structured-data syslog to SIEM.
Step 1
Log in to your Juniper platform command line interface (CLI).
Step 2
Include the following syslog statements at the
set system
hierarchy level:
[set system]
syslog {
host (hostname) {
facility <severity>;
explicit-priority;
any any;
authorization any;
firewall any;
}
source-address source-address;
structured-data {
brief;
}
}
Table 36-1 lists and describes the configuration setting variables to be entered in
the syslog statement.
Table 36-1 List of Syslog Configuration Setting Variables
Parameter Description
host (hostname) Type the IP address or the fully-qualified hostname of your
SIEM system.