Configuring DSMs
69
S
YMARK
Symark PowerBroker logs all events to a multi-line format in a single event log file,
which is viewed using Symark's pblog utility. PowerBroker logs must be
re-formatted to send syslog (TCP) logs to SIEM before you configure SIEM to
integrate with PowerBroker.
To configure Symark PowerBroker to forward syslog to SIEM:
Step 1
Access the Enterasys Extranet:
http://extranet.enterasys.com/downloads/
Step 2
Download the Perl script for the Symark PowerBroker DSM:
pbforwarder.pl.gz
Step 3
Unzip the file:
gzip -d pbforwarder.pl.gz
Step 4
Copy the Perl script to the device that hosts Symark PowerBroker.
NOTE
Perl 5.8 must be installed on the device that hosts Symark PowerBroker.
Step 5
Log in to the device that hosts Symark PowerBroker using an account that has
read/write/execute permissions for the log file.
Step 6
Type the appropriate parameters:
Table 69-1
Command Parameters
Parameters Description
-D
The -D parameter defines that the script is to run in the foreground.
Default is to run as a daemon and log all internal messages to the local
syslog service.
-t
The -t parameter defines the command line is used to tail the log file
(monitor for new output from the listener). For PowerBroker this must
be specified as
pblog -l -t
.
-f
The -f parameter defines the syslog facility and (optionally) the severity
for messages sent to the Event Collector.
If nothing is specified,
user.info
is used.
Содержание Security Information and Event Manager
Страница 1: ...Enterasys Security Information and Event Manager SIEM Configuring DSMs Release 7 7 0 P N 9034592 05...
Страница 2: ......
Страница 8: ......
Страница 20: ......
Страница 22: ......
Страница 24: ......
Страница 26: ......
Страница 32: ......
Страница 34: ......
Страница 36: ......
Страница 38: ......
Страница 44: ......
Страница 58: ......
Страница 90: ......
Страница 92: ......
Страница 94: ......
Страница 114: ......
Страница 116: ......
Страница 122: ......
Страница 124: ......
Страница 126: ...Configuring DSMs 110 FIREEYE...
Страница 128: ......
Страница 130: ......
Страница 132: ......
Страница 136: ......
Страница 140: ......
Страница 144: ......
Страница 172: ......
Страница 176: ...Configuring DSMs 160 ISC BIND...
Страница 180: ......
Страница 182: ......
Страница 184: ......
Страница 204: ......
Страница 224: ......
Страница 246: ......
Страница 250: ......
Страница 256: ......
Страница 260: ......
Страница 276: ......
Страница 282: ......
Страница 284: ......
Страница 306: ......
Страница 308: ......
Страница 318: ......
Страница 322: ......
Страница 324: ......
Страница 346: ......
Страница 356: ......
Страница 366: ......
Страница 384: ......
Страница 392: ......
Страница 394: ......
Страница 396: ......
Страница 398: ......
Страница 404: ......
Страница 426: ......