If you want to collect Juniper Steel-Belted Radius logs from Juniper Steel-Belted Radius,
configure a log source on the QRadar
Console so that Juniper Steel-Belted
Radius can communicate with QRadar by using the Log File
protocol.
Procedure
-
If automatic updates are not enabled, download and install the most recent version of the
following RPMs from the IBM® Support Website onto your QRadar
Console.
- Protocol Common RPM
- Log File protocol RPM
- JuniperSteelBeltedRadius DSM RPM
-
Add a Log File protocol log source on the QRadar
Console.
The following table describes the parameters that require specific values to collect Juniper
Steel-Belted Radius events from Juniper Steel-Belted Radius by using the Log File protocol:
Table 1. Log File protocol log source parameters
Parameter |
Description |
Log Source Type |
Juniper Steel-Belted Radius |
Protocol Configuration |
Log File |
Service Type |
FTP |
Remote Directory |
The default directory is /opt/JNPRsbr/radius/authReports/ |
FTP File Pattern |
.*\.csv |
Event Generator |
Juniper SBR |