Configure the Ubiquiti TOUGHSwitch PoE platform to send logs to Arctic Wolf

You can configure the Ubiquiti TOUGHSwitch PoE® platform to send the necessary logs to Arctic Wolf for monitoring security information.

Requirements

• Activated Arctic Wolf Sensor

Steps

1. Sign in to the Ubiquiti TOUGHSwitch PoE console as an administrator.
2. Click the DEVICE tab.
3. Expand Services.
4. Select the System Log checkbox.
5. Select the Remote Log checkbox.
6. In the Remote Log IP Address field, enter the IP address of your Arctic Wolf physical or virtual sensor.
7. In the Remote Log Port field, enter 514.
8. Contact your Concierge Security® Team to inform them that you have configured syslog forwarding, and to validate that the logs are being ingested appropriately. Include the following information:
   • Confirmation that you have completed the steps in this configuration guide.
   • The IP address you used during the configuration.
   • Any other questions or comments that you have.

See also

• Ubiquiti TOUGHSwitch User Guide