SIEM Server and Log Parameters Set up

2min

To configure SIEM integration:
Navigate to Administration > System Config Management.
Set the following parameters and click Save:
Parameter
Default Value
Possible Values
syslog.server.hostName
-
﻿
syslog.server.port
514
﻿
syslog.message.rfcFormat
RFC_5424
RFC_5424, RFC_3164
syslog.connection.protocol
UDP
UDP, TCP
syslog.message.content.format
KEY_VALUE
KEY_VALUE, CEF
Establish an SSH connection to the Single Connect server and restart netright-tomcat with the command:
systemctl restart pam-gui

Parameter	Default Value	Possible Values
syslog.server.hostName	-
syslog.server.port	514
syslog.message.rfcFormat	RFC_5424	RFC_5424, RFC_3164
syslog.connection.protocol	UDP	UDP, TCP
syslog.message.content.format	KEY_VALUE	KEY_VALUE, CEF

SIEM Configuration

SIEM Log Configuration