Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 280 / 426

Configuring DSMs
264 N
OVELL E
D
IRECTORY
The Audit Configuration panel is displayed.
Step 4
In the NPC Server name field, type the name of your NPC Server.
Step 5
Click OK .
The Audit Configuration for the NPC Server is displayed.
Step 6
Configure the following parameters:
a
On the Components panel, select one or both of the following:
- DS - Select this check box to audit XDASv2 events for an eDirectory object.
- LDAP - Select this check box to audit XDASv2 events for a Lightweight
Directory Access Protocol (LDAP) object.
b
On the Log Event’s Large Values panel, select one of the following:
- Log Large Values - Select this option to log events that are larger than 768
bytes.
- Don’t Log Large Values - Select this option to log events less than 768
bytes. If a value exceeds 768 bytes, then the event is truncated.
c
On the XDAS Events Configuration , select the check boxes of the events you
want XDAS to capture and forward to SIEM.
d
Click Apply .
Step 7
On the XDAS tab, click XDASRoles .
The XDAS Roles Configuration panel is displayed.
Step 8
Configure the following role parameters:
a
Select a check box for each object class to support event collection.
b
From the Available Attribute(s) list, select any attributes and click the arrow to
add these to the Selected Attribute(s) list.
c
Click OK once you have added the object attributes.
d
Click Apply .
Step 9
On the XDAS tab, click XDASAccounts .
The XDAS Accounts Configuration panel is displayed.
Step 10
Configure the following account parameters:
a
From the Available Classes list, select any classes and click the arrow to add
these to the Selected Attribute(s) list.
b
Click OK once you have added the object attributes.
c
Click Apply .
You are now ready to configure SIEM.
Step 11
You are now ready to configure the log source in SIEM.