Configuring VMware AVIWAF and Load Balancer to communicate with QRadar

To send events to QRadar from your VMware AVIWAF and Load Balancer system, complete the following steps.

Before you begin

Log in to the controller with sufficient administrative privilege to perform the following steps:

Procedure

  1. Navigate to Templates > Profiles > Analytics.
  2. Create a new or select a preexisting analytics profile to edit.
  3. In the Edit Analytics Profile subscreen, and click Client Log tab.
  4. Scroll down to the External Logging section and select the Stream Logs to an External Server checkbox.
  5. Complete the form and click Save.
  6. Apply the settings to those virtual services for which log data is to be streamed to the QRadar.
    For more information, see VMware Avi Load Balancer 31.1.