Documentation forSecurity Event Manager

Add syslog and agent nodes to SEM

This section describes several different ways you can add syslog and agent nodes to SEM so that SEM can monitor their events.

Add a syslog node to SEM using the Add Node wizard

Complete these steps to add a syslog node to monitor a network device. The wizard locates the new node for you and recommends the appropriate connector.

  1. Open the SEM console. See Log in to the SEM web console for steps.

  2. On the SEM menu bar, navigate to Manage > Nodes.
  3. Click Add Node.
  4. Select Syslog node.
  5. Enter the IP Address of the node.
  6. From the drop-down list, select a node vendor.
  7. Configure the node so SEM can receive syslog messages.
  8. Select the I have configured this node so that SEM can receive its Syslog messages check box.
  9. Click Next.

    SEM scans for new devices.

Use Scan for New Nodes to find new syslog sources and add connectors

Use the Scan for New Nodes feature to configure and enable multiple connectors simultaneously.

  1. Open the SEM console. See Log in to the SEM web console for steps.

  2. On the SEM menu bar, click Ops Center, and then locate the Node Health widget.

  3. Click Scan for New Nodes in the widget toolbar.

    SEM begins scanning for new nodes in your network. If new nodes are found, the New Connector(s) found banner displays in the console. Otherwise, the No nodes found banner displays.

    This process may require several minutes to complete. During the scan, a message appears indicating the scan is continuing in the background. A progress bar also displays at the bottom of the console.

  4. Click View Now.

  5. Select the recommended connectors you want to install, and then Click Next.

    Move your pointer over the connector name for details.

  6. Review the Summary information, and then click Finish.

    The Nodes grid displays with the new nodes.

    Click Monitor to view the events collected from the new nodes.

  7. On the SEM menu bar, navigate to Manage > Appliances.
  8. Click , and then select Connectors.
  9. In the Refine Results pane, enter a keyword for your new connector.

  10. Locate your connector in the list.

  11. Next to the connector, click , and then select Edit.
  12. Edit your connector settings as required, and then click Save.

    The node connector is enabled.

Other ways to add nodes to SEM

You can add nodes from the Getting Started wizard by clicking Add Nodes to Monitor.

A dialog box prompts you to choose the type of node you want to add.

Click the drop-down list, select an Agent or non-Agent node to monitor, and then follow the instructions to add the monitored node.

You can also click Add Node in the Node Health widget to perform the same function.

Add an agent node through the HTML5 SEM Events Console

  1. In the SEM Events Console, click the Nodes tab, and then click Add Agent Node.

    The Add agent node window appears displaying options for remote and local installation.

  2. Select an option, and then follow the instructions to add the monitored node. Find how to add your node connectors here.