Enterasys Security Information and Event Manager, Configuration Manual

Page: 200 / 426

Configuring DSMs
184 J
UNIPER
N
ETWORKS
Configuring Juniper
Steel-Belted Radius
for the Adaptive Log
Exporter
To integrate a Juniper Steel-Belted Radius DSM with SIEM using the Adaptive Log
Exporter:
Step 1
From the Start menu, select Start > Programs > Adaptive Log Exporter >
Configure Adapter Log Exporter .
The Adaptive Log Exporter must be installed on the same system as your Juniper
SBR system. The Adaptive Log Exporter must be updated to include the Juniper
SBR device plug-in. For more information, see your Adaptive Log Exporter Users
Guide.
Step 2
Click the Devices tab.
Step 3
Select Juniper SBR , right-click and select Add Device .
The New Juniper SBR Properties window is displayed.
Step 4
Configure the following parameters:
a
Name - Type a name for the device. The name may include alphanumeric
characters and underscore (_) characters.
b
Description - Type a description for this device.
c
Device Address - Type the IP address or hostname that the device. The IP
address or hostname is used to identify the device in syslog messages
forwarded to SIEM. This is the IP address or hostname that will appear in SIEM.
d
Root Log Directory - Type the location where Juniper SBR stores log files.
Report log files should be located in the Steel-Belted Radius directory
<radiusdir>\authReports
. The Adaptive Log Exporter monitors the Root
Log Directory for any .CSV files having a date stamp in the file name matching
the current day.
Step 5
From the Adaptive Log Exporter toolbar, click Save .
Step 6
From the Adaptive Log Exporter toolbar, click Deploy .
NOTE
You must use the default values for the log file heading in the Juniper Steel-Belted
Radius appliance. If the log file headings have been changed from the default
values and SIEM is not parsing SBR events properly, please contact Customer
Support.
Step 7
You are now ready to configure the log source in SIEM.
Juniper SBR events provided from the Adaptive Log Exporter are auto discovered
by SIEM. If you want to manually configure SIEM to receive events from Juniper
Steel-Belted Radius:

From the Log Source Type drop-down box, select the Juniper Steel Belted
Radius option.
For more information on configuring log sources, see the Log Sources User Guide .