Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 173 / 426

Configuring DSMs
32 ISC B
IND
You can integrate an Internet System Consortium (ISC) BIND device with SIEM.
An ISC BIND device accepts events using syslog.
Before you configure SIEM to integrate with an ISC BIND device, you must:
Step 1
Log in to the ISC BIND device.
Step 2
Open the following file to add a logging clause:
named.conf
logging {
channel <channel_name> {
syslog <syslog_facility>;
severity <critical | error | warning | notice | info |
debug [level ] | dynamic >;
print-category yes;
print-severity yes;
print-time yes;
};
category queries {
<channel_name>;
};
category notify {
<channel_name>;
};
category network {
<channel_name>;
};
category client {
<channel_name>;
};