Reference Guide
...
Kron PAM Reporting and Logging...
SIEM Configuration
SIEM Server and Log Parameters Set up
To configure SIEM integration:
- Navigate to Administration > System Config Management.
- Set the following parameters and click Save:
Parameter | Default Value | Possible Values |
---|---|---|
syslog.server.hostName | - | 10.20.41.69#10.20.41.59 |
syslog.server.port | 514 | |
syslog.message.rfcFormat | RFC_5424 | RFC_5424, RFC_3164 |
syslog.connection.protocol | UDP | UDP, TCP |
syslog.message.content.format | KEY_VALUE | KEY_VALUE, CEF, LEGACY_CEF |
- Establish an SSH connection to the Kron PAM server and restart netright-tomcat with the command: systemctl restart pam-gui