Enterasys Security Information and Event Manager, Configuration Manual

Page: 197 / 426

Configuring DSMs
Juniper JunOS 181
Step 3
You are now ready to configure the log source in SIEM.
The following devices are auto discovered by SIEM as a Juniper JunOS Platform
devices:
•
Juniper M-Series Multiservice Edge Routing
•
Juniper MX-Series Ethernet Services Router
• Juniper SRX-series
• Juniper EX-Series Ethernet Switch
•
Juniper T-Series Core Platform
To manually configure SIEM to receive events from a Juniper JunOS Platform
device:

From the Log Source Type drop-down list box, select one of the following
options: Juniper JunOS Platform, Juniper M-Series Multiservice Edge
Routing, Juniper MX-Series Ethernet Services Router, Juniper
SRX-series,
or Juniper T-Series Core Platform .
Facility <severity> Define the severity of the messages that belong to the named
facility with which it is paired. Valid severity levels are:
•
any
•
none
•
emergency
•
alert
•
critical
•
error
•
warning
•
notice
•
info
Messages with the specified severity level and higher are
logged. The levels from
emergency
through
info
are in order
from highest severity to lowest.
Source-address Type a valid IP address configured on one of the router
interfaces for system logging purposes.
The source-address is recorded as the source of the message in
the messages sent to the remote machine specified in host
hostname statement at the
set system syslog
hierarchy
level; not, however, for messages directed to the other routing
engine, or to the TX Matrix platform in a routing matrix.
structured-data Inserts structured-data syslog into the data.
Table 36-1 List of Syslog Configuration Setting Variables (continued)
Parameter Description