Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 247 / 426

Configuring DSMs
42 M
OTOROLA
S
YMBOL
AP
The SIEM Symbol AP DSM accepts events using syslog. SIEM records all relevant
events. Before configuring a Symbol AP device in SIEM, you must configure your
device to send syslog events to SIEM.
To configure the device to send syslog events to SIEM, perform the following
steps:
Step 1
Log in to your Symbol AP device user interface.
Step 2
From the menu, select System Configuration > Logging Configuration .
The Access Point window is displayed.
Step 3
Using the Logging Level drop-down list box, select the desired log level for
tracking system events. The options are:
0 - Emergency
1- Alert
2 - Critical
3 - Errors
4 - Warning
5 - Notice
6 - Info. This is the default.
7 - Debug
Step 4
To log events to an external syslog (system log) server, select the Enable logging
to an external syslog server check box to enable the server to monitor for
incoming syslog messages and decode the messages into a log for viewing.
Step 5
Type the IP address of an external syslog server in the Syslog Server IP Address
field.
This is required to route the syslog events to that destination.
Step 6
Click Apply .
Step 7
Click Logout .
A confirmation window is displayed.
Step 8
Click OK to exit the application.