Reference Guide
...
Kron PAM Reporting and Logging...
SIEM Configuration

SIEM Server and Log Parameters Set up

To configure SIEM integration:

  1. Navigate to Administration > System Config Management.
  2. Set the following parameters and click Save:

Parameter

Default Value

Possible Values

syslog.server.hostName

-

10.20.41.69#10.20.41.59

syslog.server.port

514



syslog.message.rfcFormat

RFC_5424

RFC_5424, RFC_3164

syslog.connection.protocol

UDP

UDP, TCP

syslog.message.content.format

KEY_VALUE

KEY_VALUE, CEF, LEGACY_CEF

  • Establish an SSH connection to the Kron PAM server and restart netright-tomcat with the command: systemctl restart pam-gui