When you configure NETGEAR Switch to send log data to USM Appliance, you can use the NETGEAR Switch plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
| Device | Details |
|---|---|
| Vendor | NETGEAR |
| Device Type | Router/switch |
| Connection Type | Syslog |
| Data Source Name | Netgear-switch |
| Data Source ID | 1857 |
Integrating NETGEAR Switch
Before you configure the NETGEAR Switch integration, you must have the IP Address of the USM Appliance Sensor.
To configure NETGEAR Switch to send log data to USM Appliance
- From the NETGEAR Switch user interface, select Monitoring > Logs > Server Log.
- Enter the USM Appliance IP address into the Server IP field.
- Enter 514 into the UDP Port field.
- Select a Facility for syslog. (The default is 0.)
- (Optionally) Add a description for the server entry, for example, "AlienVault USM Appliance".
- Select Informational as Minimum Severity.
- Click Add to apply your updates.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
For troubleshooting, refer to the vendor documentation:
Feedback