Enterasys Security Information and Event Manager, Configuration Manual

Page: 37 / 426

Configuring DSMs
9 B
IT
9 P
ARITY
The SIEM Bit9 Parity DSM accepts events using the Log Enhanced Event Format
(LEEF), enabling SIEM to record all relevant events. Before configuring a Bit9
Parity DSM in SIEM, you must configure your Bit9 Parity device to send events to
SIEM.
To configure your Bit9 Parity device, you must:
Step 1
Log in to the Bit9 Parity console with Administrator or PowerUser privileges.
Step 2
From the navigation menu on the left side of the console, select Administration >
System Configuration .
The System Configuration window is displayed.
Step 3
Click Server Status .
The Server Status window is displayed.
Step 4
Click Edit .
Step 5
In the Syslog address field, type the IP address of your SIEM system.
Step 6
From the Syslog format drop-down list box, select LEEF (Q1Labs) .
Step 7
Select the Syslog enabled check box.
Step 8
Click Update .
Step 9
You are now ready to configure the log source in SIEM.
SIEM automatically detects a Bit9 Parity device. However, if you want to manually
configure SIEM to receive events from Bit9:

From the Log Source Type drop-down list box, select Bit9 Parity .
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Bit9 Parity device, see your vendor
documentation.