Enterasys Security Information and Event Manager, Configuration Manual

Page: 33 / 426

Configuring DSMs
7 A
RUBA
M
OBILITY
C
ONTROLLERS
The SIEM Aruba Mobility Controllers DSM accepts events using syslog. SIEM
records all relevant events. Before configuring an Aruba Mobility Controller device
in SIEM, you must configure your device to send syslog events to SIEM.
To configure the Aruba Wireless Networks (Mobility Controller) device to forward
syslog events to SIEM:
Step 1
Log in to the Aruba Mobility Controller user interface.
Step 2
From the top menu, select Configuration .
Step 3
From the Switch menu, select Management .
Step 4
Click the Logging tab.
Step 5
From the Logging Servers menu, select Add .
Step 6
Type the IP address of the SIEM server that you want to collect logs.
Step 7
Click Add .
Step 8
Optional. Change the logging level for a module:
a
Select the check box next to the name of the logging module.
b
Choose the logging level you want to change from the drop-down list box that is
displayed at the bottom of the window.
Step 9
Click Done .
Step 10
Click Apply .
Step 11
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from an Aruba Mobility Controller device:

From the Log Source Type drop-down list box, select the Aruba Mobility
Controller option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Aruba Mobility Controller device, see your vendor
documentation.