knowledge Doc: Forwarding auditing events of SSPR to syslog server or SIEM

0 Likes

Summary
Forwarding auditing events of SSPR to syslog server or SIEM


Products
Self Service Password Reset (SSPR)

Environment
Self Service Password Reset (SSPR) 4.5, 4.6

Situation
Forwarding SSPR auditing events to syslog server or SIEM.

Resolution
SSPR has a feature to forward SSPR auditing events to multiple syslog servers or SIEM.

This can be achieved by configuring Auditing for SSPR. Please refer to the doc links below for the details.

SSPR 4.5
SSPR 4.5 Admin - 13.5 Configuring Logging
https://www.netiq.com/documentation/self-service-password-reset-45/sspr-adminguide/data/b14knaes.html

SSPR 4.5 Admin - 13.6 Auditing for Self Service Password Reset
https://www.netiq.com/documentation/self-service-password-reset-45/sspr-adminguide/data/b1lua2dm.html

SSPR 4.6
SSPR 4.6 Admin - 13.6 Configuring Logging
https://www.netiq.com/documentation/self-service-password-reset-46/sspr-adminguide/data/b14knaes.html

SSPR 4.6 Admin - 13.7 Auditing for Self Service Password Reset
https://www.netiq.com/documentation/self-service-password-reset-46/sspr-adminguide/data/b1lua2dm.html


Knowledge Base Article Link


URL Name
KM000015875

Labels:

Knowledge Doc
Comment List
Related
Recommended