Configuring DSMs
216
M
ICROSOFT
Step 11
Click
OK
.
Step 12
You are now ready to configure the log source in SIEM.
Configuring the Microsoft IIS Protocol in SIEM
To configure the log source in the SIEM user interface:
Step 1
Log in to SIEM.
Step 2
Click the
Admin
tab.
Step 3
On the navigation menu, click
Data Sources
.
The Data Sources panel is displayed.
Step 4
Click the
Log Sources
icon.
The Log Sources window is displayed.
Step 5
Click
Add
.
The Add a log source window is displayed.
Step 6
From the
Log Source Type
drop-down list box, select
Microsoft IIS Server
.
Step 7
From the
Protocol Configuration
drop-down list box, select
Microsoft IIS
.
Step 8
Configure the following values:
User Name (cs-username)
User Name (cs-username)
Server IP Address (s-ip)
Server IP Address (s-ip)
Server Port (s-port)
Server Port (s-port)
Method (cs-method)
Method (cs-method)
URI Stem (cs-uri-stem)
URI Stem (cs-uri-stem)
URI Query (cs-uri-query)
URI Query (cs-uri-query)
Protocol Status (sc-status)
Protocol Status (sc-status)
Protocol Version (cs-version)
User Agent (cs(User-Agent))
User Agent (cs(User-Agent))
Table 41-2
Required Properties for IIS Event Logs
IIS 6.0 Required Properties
IIS 7.0 Required Properties
Table 41-3
Microsoft IIS Protocol Parameters
Parameter
Description
Log Source Identifier
Type the IP address or hostname for the log source.
Server Address
Type the IP address of the Microsoft IIS server.
Username
Type the username required to access the Microsoft IIS
server.
Password
Type the password required to access the Microsoft IIS
server.
Confirm Password
Confirm the password required to access the Microsoft IIS
server.
Содержание Security Information and Event Manager
Страница 1: ...Enterasys Security Information and Event Manager SIEM Configuring DSMs Release 7 7 0 P N 9034592 05...
Страница 2: ......
Страница 8: ......
Страница 20: ......
Страница 22: ......
Страница 24: ......
Страница 26: ......
Страница 32: ......
Страница 34: ......
Страница 36: ......
Страница 38: ......
Страница 44: ......
Страница 58: ......
Страница 90: ......
Страница 92: ......
Страница 94: ......
Страница 114: ......
Страница 116: ......
Страница 122: ......
Страница 124: ......
Страница 126: ...Configuring DSMs 110 FIREEYE...
Страница 128: ......
Страница 130: ......
Страница 132: ......
Страница 136: ......
Страница 140: ......
Страница 144: ......
Страница 172: ......
Страница 176: ...Configuring DSMs 160 ISC BIND...
Страница 180: ......
Страница 182: ......
Страница 184: ......
Страница 204: ......
Страница 224: ......
Страница 246: ......
Страница 250: ......
Страница 256: ......
Страница 260: ......
Страница 276: ......
Страница 282: ......
Страница 284: ......
Страница 306: ......
Страница 308: ......
Страница 318: ......
Страница 322: ......
Страница 324: ......
Страница 346: ......
Страница 356: ......
Страница 366: ......
Страница 384: ......
Страница 392: ......
Страница 394: ......
Страница 396: ......
Страница 398: ......
Страница 404: ......
Страница 426: ......