Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 283 / 426

Configuring DSMs
49 O
PEN
BSD
A SIEM OpenBSD DSM accepts events using syslog. SIEM records all relevant
informational, authentication, and system level events.
Before you configure SIEM to integrate with OpenBSD, you must:
Step 1
Log in to your OpenBSD device, as a root user.
Step 2
Open the
/etc/syslog.conf
file.
Step 3
Add the following line to the top of the file. Make sure all other lines remain intact:
*.* @<IP address>
Where
<IP address>
is the IP address of the SIEM system.
Step 4
Save and exit the file.
Step 5
Send a hang-up signal to the syslog daemon to ensure all changes are applied:
kill -HUP `cat /var/run/syslog.pid`
NOTE
The command above uses the backquote character ( ‘ ), which is located to the
left of the number one on most keyboard layouts.
Step 6
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from an OpenBSD server:

From the Log Source Type drop-down list box, select the OpenBSD OS
option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information on OpenBSD system events, see your OpenBSD operating
system documentation.