F5 Networks BIG-IP LTM

The F5 Networks BIG-IP Local Traffic Manager (LTM) DSM for IBM QRadar collects networks security events from a BIG-IP device by using syslog.

Before events can be received in QRadar, you must configure a log source for QRadar, and then configure your BIG-IP LTM device to forward syslog events. Create the log source before events are forwarded as QRadar does not automatically discover or create log sources for syslog events from F5 BIG-IP LTM appliances.