Enterasys Security Information and Event Manager, Configuration Manual

Page: 268 / 426

Configuring DSMs
252 N
ORTEL
N
ETWORKS
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Nortel Secure Router command line interface (CLI).
Step 2
Type the following to access global configuration mode:
config term
Step 3
Type the following command:
system logging syslog
Step 4
Type the IP address of the syslog server (SIEM system):
host_ipaddr <IP address>
Where
<IP address>
is the IP address of the SIEM system.
Step 5
Ensure that remote logging is enabled:
enable
Step 6
Verify that the logging levels are configured, as appropriate:
show system logging syslog
The following shows an example of the output:
------------------------------------
Syslog Setting
------------------------------------
Syslog: Enabled
Host IP Address: 10.10.10.1
Host UDP Port: 514
Facility Priority Setting:
facility priority
======== ========
auth: info
bootp: warning
daemon: warning
domainname: warning
gated: warning
kern: info
mail: warning
ntp: warning
system: info
fr: warning
ppp: warning
ipmux: warning
bundle: warning