IBM zSecure Alert
The JSA DSM for IBM zSecure Alert collects Syslog events from a IBM zSecure Alert.
To integrate IBM zSecure Alert with JSA, complete the following steps:
If automatic updates are not enabled, RPMs are available for download from the https://support.juniper.net/support/downloads/ onto your JSA Console.
Configure your IBM zSecure Alert to send events to JSA.
If JSA does not automatically detect the log source, add a IBM zSecure Alert log source on the JSA Console.
The alert configuration on your IBM zSecure Alert appliance determines which alert conditions you want to monitor and forward to JSA. To collect events in JSA, you must configure your IBM zSecure Alert appliance to forward events in a UNIX syslog event format by using the JSA IP address as the destination. For information on configuring UNIX syslog alerts and destinations, see the IBM Security zSecure Alert User Reference Manual.
Syslog Log Source Parameters for IBM zSecure Alert
If JSA does not automatically detect the log source, add an IBM zSecure Alert log source on the JSA Console by using the Syslog protocol.
When using the syslog protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect Syslog events from IBM zSecure Alert:
Parameter |
Value |
|---|---|
Log Source type |
IBM zSecure Alert |
Protocol Configuration |
Syslog |
Log Source Identifier |
Type the IP address or host name for the log source as an identifier for events from your IBM zSecure Alert. |