Enterasys Security Information and Event Manager, Configuration Manual

Page: 345 / 426

Configuring DSMs
Sourcefire Defense Center (DC) 329
For more information about Sourcefire, see the Sourcefire documentation, see
http://www.sourcefire.com.
Table 62-4 Sourcefire Defense Center Estreamer Parameters
Parameter Description
Log Source Identifier Type the IP address or hostname to identify the log source.
The information in the Log Source Identifier field must be
unique to the log source type.
Server Address Type the IP address or hostname of the Sourcefire Defense
Center device.
Server Port Type the port number SIEM uses to receive Sourcefire
Defense Center Estreamer events. The default is 8302.
Keystore Filename Type the directory path and file name for the keystore private
key and associated certificate.
By default, the import script creates the keystore file in the
following directory:
/opt/qradar/conf/estreamer.keystore
Truststore Filename Type the directory path and file name for the truststore files.
The truststore file contain the certificates trusted by the client.
By default, the import script creates the truststore file in the
following directory:
/opt/qradar/conf/estreamer.truststore