Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Adding Log Collector to Security Director

    You must deploy either Security Director Log Collector or Juniper Secure Analytics (JSA) as a log collector and then add it to Security Director to view the log data in the Dashboard, Events and Logs, Reports, and Alerts pages.

    Before You Begin

    • Deploy Security Director Log Collector or JSA as a Log Collector.
    • Configure system log and security logging for the devices managed by Junos Space Security Director from Devices > Security Devices > Modify Configuration.

    Procedure

    To add Log Collector to Security Director:

    1. From the Security Director user interface, select Administration > Logging Management > Logging Nodes, and click the plus sign (+).

      The Add Logging Node page appears.

    2. Choose the Log Collector type as Security Director Log Collector or Juniper Secure Analytics.

      If you select Security Director Log Collector, then you must also select the deployment.

    3. Click Next.
    4. Complete the configuration for Add Collector/JSA Node.

      Note: Provide the root credentials for the Security Director Log Collector node. For JSA, provide the admin credentials that is used to log in to the JSA console.

    5. If the Log Collector type is Security Director Log Collector, then Add Another Node is displayed. Add multiple nodes as needed.
    6. Click Next.

      The certificate details are displayed.

    7. Click Finish.
    8. Review the summary of configuration changes from the summary page and click Edit to modify the details, if required.
    9. Click OK to add the node.

      A new logging node with your configuration is added. To verify that the node is configured correctly, click Logging Management to check the status of the node.

    Removing Security Director Log Collector and Adding JSA as a Log Collector

    To remove an existing Security Director Log Collector and add JSA as a Log Collector:

    1. Select Administration > Logging Management > Logging Nodes.
    2. Select the existing Security Director Log Collector and click the delete icon to delete Security Director Log Collector node.
    3. Click the + icon to add JSA as a Log Collector.

      You can either add All-in-One node for the standalone deployment, or Console node for the distributed deployment.

    4. Configure the SRX Series devices to stop sending logs to Security Director Log Collector, and ensure that logs are sent to the JSA node.

    Modified: 2017-07-23