Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

HP ProCurve

 

You can integrate an HP ProCurve device with JSA to record all relevant HP Procurve events using syslog.

Take the following steps to configure your HP ProCurve device to forward syslog events to JSA.

  1. Log into the HP ProCurve device.
  2. Type the following command to make global configuration level changes.

    config

    If successful, the CLI will change to the following prompt:

    ProCurve(config)#

  3. Type the following command:

    logging <syslog-ip-addr>

    Where: <syslog-ip-addr> is the IP address of JSA.

  4. To exit config mode, press CTRL+Z.
  5. Type the following command: write mem to save the current configuration to the startup configuration for your HP ProCurve device.

    You are now ready to configure the log source in JSA.

Configuring a Log Source

JSA automatically discovers and creates a log source for LEEF formatted syslog events that are forwarded from Active Defense.

These configuration steps are optional:

  1. Log in to JSA.
  2. Click the Admin tab.
  3. In the navigation menu, click Data Sources.
  4. Click the Log Sources icon.
  5. Click Add.
  6. In the Log Source Name field, type a name for the log source.
  7. In the Log Source Description field, type a description for the log source.
  8. From the Log Source Type list, select HP ProCurve.
  9. From the Protocol Configuration list, select Syslog.
  10. Configure the following values:

    Table 1: HP ProCurve Syslog Protocol Parameters

    Parameter

    Description

    Log Source Identifier

    Type the IP address or host name for your HP ProCurve device.

  11. Click Save.
  12. On the Admin tab, click Deploy Changes.

    The configuration is complete.