Configuring a Arpeggio SIFT-IT Log Source

JSA automatically discovers and creates a log source for system authentication events forwarded from Arpeggio SIFT-IT.

This procedure is optional.

1. Log in to JSA.
2. Click the Admin tab.
3. On the navigation menu, click Data Sources.
4. Click the Log Sources icon.
5. Click Add.
6. In the Log Source Name field, type a name for your log source.
7. In the Log Source Description field, type a description for the log source.
8. From the Log Source Type list, select Arpeggio SIFT-IT.
9. From the Protocol Configuration list, select Syslog.
10. In the Log Source Identifier field, type the IP address or host name for the log source as an identifier for events from your Arpeggio SIFT-IT installation.
11. Click Save.
12. On the Admin tab, click Deploy Changes.