Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

IBM zSecure Alert

 

The JSA DSM for IBM zSecure Alert collects Syslog events from a IBM zSecure Alert.

To integrate IBM zSecure Alert with JSA, complete the following steps:

  1. If automatic updates are not enabled, RPMs are available for download from the https://support.juniper.net/support/downloads/ onto your JSA Console.

  2. Configure your IBM zSecure Alert to send events to JSA.

  3. If JSA does not automatically detect the log source, add a IBM zSecure Alert log source on the JSA Console.

The alert configuration on your IBM zSecure Alert appliance determines which alert conditions you want to monitor and forward to JSA. To collect events in JSA, you must configure your IBM zSecure Alert appliance to forward events in a UNIX syslog event format by using the JSA IP address as the destination. For information on configuring UNIX syslog alerts and destinations, see the IBM Security zSecure Alert User Reference Manual.

Syslog Log Source Parameters for IBM zSecure Alert

If JSA does not automatically detect the log source, add an IBM zSecure Alert log source on the JSA Console by using the Syslog protocol.

When using the syslog protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Syslog events from IBM zSecure Alert:

Table 1: Syslog Log Source Parameters for the IBM zSecure Alert DSM

Parameter

Value

Log Source type

IBM zSecure Alert

Protocol Configuration

Syslog

Log Source Identifier

Type the IP address or host name for the log source as an identifier for events from your IBM zSecure Alert.