Juniper Networks EX Series Ethernet Switch

The Juniper EX Series Ethernet Switch DSM for IBM® QRadar® accepts events by using syslog.

1. Log in to the Juniper EX Series Ethernet Switch command line interface (CLI).
2. Type the following command:

   configure

3. Type the following command:

   set system syslog host <IP address> <option> <level>

   Where:

   • <IP address> is the IP address of your QRadar.

   • <level> is info, error, warning, or any.

   • <option> is one of the following options from Table 1.

   Table 1. Juniper Networks EX Series switch options

   Option	Description
   any	All facilities
   authorization	Authorization system
   change-log	Configuration change log
   conflict-log	Configuration conflict log
   daemon	Various system processes
   dfc	Dynamic flow capture
   explicit-priority	Include priority and facility in messages
   external	Local external applications
   facility-override	Alternative facility for logging to remote host
   firewall	Firewall filtering system
   ftp	FTP process
   interactive-commands	Commands run by the UI
   kernel	Kernel
   log-prefix	Prefix for all logging to this host
   match	Regular expression for lines to be logged
   pfe	Packet Forwarding Engine
   user	User processes

   For example:

   set system syslog host <IP_address> firewall info

   This command example configures the Juniper EX Series Ethernet Switch to send info messages from firewall filter systems to your QRadar.

4. Repeat steps 1-3 to configure any additional syslog destinations and options. Each additional option must be identified by using a separate syslog destination configuration.
5. You are now ready to configure the Juniper EX Series Ethernet Switch in QRadar.