Configuring Juniper Networks Steel-Belted Radius to forward Syslog events to QRadar®

Before you can add a log source in QRadar, configure your Juniper Networks Steel-Belted Radius device to send Syslog events to QRadar.

1. Use SSH to log in to your Juniper Steel-Belted Radius device, as a root user.
2. Edit the following file:

   /etc/syslog.conf

3. Add the following information:

   <facility>.<priority>@<IP address>

   Where:

   • <facility> is the syslog facility, for example, local3.
   • <priority> is the syslog priority, for example, info.
   • <IP address> is the IP address of QRadar.
4. Save the file.
5. From the command-line, type the following command to restart syslog:

   service syslog restart