Enterasys Security Information and Event Manager, Configuration Manual

Page: 72 / 426

Configuring DSMs
56 C
ISCO
• Nas-IP-Address
•
Authen-Failure-Code
•
Caller-ID
• NAS-Port
• Author-Data
•
Group-Name
•
Filter Information
• Logged Remotely
Step 7
Configure the following syslog parameters:
•
IP - Type the IP address of SIEM.
•
Port - Type the syslog port number of SIEM. The default is port 514.
• Max message length (Bytes) - Type 1024 as the maximum syslog message
length.
NOTE
Cisco ACS provides syslog report information for a maximum of two syslog
servers.
Step 8
Click Submit .
Step 9
You are now ready to configure the log source in SIEM.
SIEM automatically detects a Cisco ACS device. However, if you want to manually
configure SIEM to receive events from Cisco ACS:

From the Log Source Type drop-down list box, select the Cisco ACS option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about Cisco ACS, see your vendor documentation.
Configuring Cisco
ACS for the Adaptive
Log Exporter
To configure your Cisco ACS device for the Adaptive Log Exporter, you must:
Step 1
Log in to your Cisco ACS device user interface.
Step 2
In the navigation bar, click System Configuration .
The System Configuration page opens.
Step 3
Click Logging .
The logging configuration is displayed.
Step 4
In the CSV column for Failed Attempts , click Configure .
The Enable Logging window is displayed.
Step 5
Select the Log to CSV Failed Attempts report check box.