Summary
Forwarding auditing events of SSPR to syslog server or SIEM

Products
Self Service Password Reset (SSPR)

Environment
Self Service Password Reset (SSPR) 4.5, 4.6

Situation
Forwarding SSPR auditing events to syslog server or SIEM.

Resolution
SSPR has a feature to forward SSPR auditing events to multiple syslog servers or SIEM.

This can be achieved by configuring Auditing for SSPR. Please refer to the doc links below for the details.

SSPR 4.5
SSPR 4.5 Admin - 13.5 Configuring Logging
https://www.netiq.com/documentation/self-service-password-reset-45/sspr-adminguide/data/b14knaes.html

SSPR 4.5 Admin - 13.6 Auditing for Self Service Password Reset
https://www.netiq.com/documentation/self-service-password-reset-45/sspr-adminguide/data/b1lua2dm.html

SSPR 4.6
SSPR 4.6 Admin - 13.6 Configuring Logging
https://www.netiq.com/documentation/self-service-password-reset-46/sspr-adminguide/data/b14knaes.html

SSPR 4.6 Admin - 13.7 Auditing for Self Service Password Reset
https://www.netiq.com/documentation/self-service-password-reset-46/sspr-adminguide/data/b1lua2dm.html

Knowledge Base Article Link

URL Name
KM000015875