Description

How to Forward Security Director Insights logs of firewall to external SIEM

Solution

To Forward the log to external SEIM or third party syslog server follow the below steps:

  1. Login to the UI of security director
  2. Select Administration> Logging Management > Logging Nodes. On the upper right side of the page, click the Log Forwarding button.
  3. Complete the configuration. Please refer the below table

Settings

Guidelines

Syslog Forwarding

Enable this option to forward the logs to a syslog server.

Destination IP

Specifies the IP address to which the syslog is forwarded.

Port Number

Specifies the port number to which the syslog is forwarded.

Protocol

Specifies the protocol to which the syslog is forwarded. The available protocols are TCP and UDP.

 

 
NOTE: Starting in Junos Space Security Director Release 24.1R4, the Log Forwarding option is removed from Junos Space Security Director GUI. For more details refer to Space/SD user guide. 
 

 

 

Modification History

2025-04-08 : Article Created