How-To: Export your RADIUS Logs to Kafka

EZRADIUS enables your security team to monitor critical user actions by pushing the information to your SIEM. In this page we will show you how to connect your RADIUS logs to Kafka.

Prerequisites

How To Export Your Cloud RADIUS Audit Logs To Kafka

How To Enable Log Export in EZRADIUS Portal

  1. Go to your EZRADIUS Portal.

  2. Click on Settings.

    EZRADIUS Cloud RADIUS portal Radius Authentication Overview dashboard with Settings option highlighted in navigation

  3. Scroll down to SIEM Settings and enable the Send Audit Logs to SIEM option.

    EZRADIUS Cloud RADIUS SIEM Settings panel with Send Audit Logs to SIEM checkbox highlighted in red

How To Configure Kafka Logs in the Kafka Portal

  1. Open your Kafka instance in another window.

  2. Identify your Kafka topic name and note it down.

  3. Verify authentication support:
    Ensure your Kafka server supports Plaintext SASL Authentication.

  4. Gather credentials:
    Note the SASL username and password required for authentication.

How To Configure the Kafka SIEM in EZRADIUS Portal

  1. Now go back to the EZRADIUS Portal.

  2. Select Kafka as the SIEM Provider.

    Set Kafka as the SIEM in EZRADIUS

  3. Input the values that you copied from the Kafka portals. Then, click Test Connection. This will create a test log in your Kafka Topic (please allow a few minutes for the log to show up in the Kafka portal).

    Kafka Paste Values and Test Connection

  4. If the connection test is successful, click Save changes

    EZRADIUS Settings Save Changes

  5. EZRADIUS will now send your security alerts to your Topic. If an error occurs it will email your subscription administrators. See below to see the different events EZRADIUS will send.