Cisco ACS

The Cisco ACS DSM for IBM QRadar accepts syslog ACS events by using syslog and UDP multiline.

QRadar records all relevant and available information from the event. You can integrate Cisco ACS with QRadar by using one of the following methods:

• Configure your Cisco ACS device to directly send syslog to QRadar for Cisco ACS v5.x. See Configuring Syslog for Cisco ACS v5.x.
• Configure your Cisco ACS device to directly send syslog to QRadar for Cisco ACS v4.x. See Configuring Syslog for Cisco ACS v4.x.
• Configure your Cisco ACS device to directly send UDP multiline syslog to QRadar. See UDP Multiline Syslog log source parameters for Cisco ACS