Syslog Log Source Parameters for Cilasoft QJRN/400
If JSA does not automatically detect the log source, add a Cilasoft QJRN/400 log source on the JSA Console by using the syslog protocol.
When using the syslog protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect syslog events from Cilasoft QJRN/400:
Parameter |
Value |
---|---|
Log Source type |
Cilasoft QJRN/400 |
Protocol Configuration |
Syslog If Cilasoft QJRN/400 is configured to write events to the integrated file system with the *IFS option, the administrator must select Log File, and then configure the log file protocol. |
Log Source Identifier |
Type the IP address of your Cilasoft QJRN/400 installation. |
Enabled |
Select the Enabled check box to enable the log source. By default, the check box is selected. |
Credibility |
Select the Credibility of the log source. The range is 0 - 10. The credibility indicates the integrity of an event or offense as determined by the credibility rating from the source devices. Credibility increases if multiple sources report the same event. The default is 5. |
Target Event Collector |
Select the Target Event Collector to use as the target for the log source. |
Coalescing Events |
Select this check box to enable the log source to coalesce (bundle) events. By default, automatically discovered log sources inherit the value of the Coalescing Events list from the System Settings in JSA. When you create a log source or edit an existing configuration, you can override the default value by configuring this option for each log source. |
Incoming Event Payload |
From the list, select the Incoming Event Payload encoder for parsing and storing the logs. |
Store Event Payload |
Select the Store Event Payload check box to enable the log source to store event payload information. By default, automatically discovered log sources inherit the value of the Store Event Payload list from the System Settings in JSA. When you create a log source or edit an existing configuration, you can override the default value by configuring this option for each log source. |