Sun Solaris DHCP

JSA automatically discovers and creates a log source for syslog events from Sun Solaris DHCP installations.

The following configuration steps are optional.

1. Log in to JSA.
2. Click the Admin tab.
3. On the navigation menu, click Data Sources.
4. Click the Log Sources icon.
5. Click Add.
6. In the Log Source Name field, type a name for your log source.
7. In the Log Source Description field, type a description for the log source.
8. From the Log Source Type list, select Solaris Operating System Authentication Messages.
9. Using the Protocol Configuration list, select Syslog.
10. Configure the following values:

    Table 1: Syslog Parameters

    Parameter	Description
    Log Source Identifier	Type the IP address or host name for the log source as an identifier for events from Sun Solaris installations. Each additional log source that you create when you have multiple installations ideally includes a unique identifier, such as an IP address or host name.

11. Click Save.
12. On the Admin tab, click Deploy Changes.

    The log source is added to JSA. Events that are forwarded to JSA by Solaris Sendmail is displayed on the Log Activity tab.

Configuring Sun Solaris DHCP

The Sun Solaris DHCP DSM for JSA records all relevant DHCP events by using syslog.

To collect events from Sun Solaris DHCP, you must configure syslog to forward events to JSA.

1. Log in to the Sun Solaris command-line interface.
2. Edit the /etc/default/dhcp file.
3. Enable logging of DHCP transactions to syslog by adding the following line:

   LOGGING_FACILITY=X

   Where X is the number corresponding to a local syslog facility, for example, a number 0 - 7.

4. Save and exit the file.
5. Edit the /etc/syslog.conf file.
6. To forward system authentication logs to JSA, add the following line to the file:

   localX.notice @<IP address>

   Where:

   X is the logging facility number that you specified in Step 3.

   <IP address> is the IP address of your JSA. Use tabs instead of spaces to format the line.

7. Save and exit the file.
8. Type the following command:

   kill -HUP `cat /etc/syslog.pid`

You are now ready to configure the log source in JSA.

Configuring Sun Solaris

The Sun Solaris DSM for JSA records all relevant Solaris authentication events by using syslog.

To collect authentication events from Sun Solaris, you must configure syslog to forward events to JSA.

1. Log in to the Sun Solaris command-line interface.
2. Open the /etc/syslog.conf file.
3. To forward system authentication logs to JSA, add the following line to the file:

   *.err;auth.notice;auth.info@<IP address>

   Where <IP address> is the IP address of your JSA. Use tabs instead of spaces to format the line.

   Note

   Depending on the version of Solaris, you are running, you might need to add more log types to the file. Contact your system administrator for more information.

4. Save and exit the file.
5. Type the following command:

   kill -HUP `cat /etc/syslog.pid`

You are now ready to configure the log source JSA.

.