Configuring a Juniper Steel-Belted Radius log source by using the Log File protocol

If you want to collect Juniper Steel-Belted Radius logs from Juniper Steel-Belted Radius, configure a log source on the QRadar Console so that Juniper Steel-Belted Radius can communicate with QRadar by using the Log File protocol.

Procedure

  1. If automatic updates are not enabled, download and install the most recent version of the following RPMs from the IBM® Support Website onto your QRadar Console.
    • Protocol Common RPM
    • Log File protocol RPM
    • JuniperSteelBeltedRadius DSM RPM
  2. Add a Log File protocol log source on the QRadar Console.

    The following table describes the parameters that require specific values to collect Juniper Steel-Belted Radius events from Juniper Steel-Belted Radius by using the Log File protocol:

    Table 1. Log File protocol log source parameters
    Parameter Description
    Log Source Type Juniper Steel-Belted Radius
    Protocol Configuration Log File
    Service Type FTP
    Remote Directory The default directory is /opt/JNPRsbr/radius/authReports/
    FTP File Pattern .*\.csv
    Event Generator Juniper SBR