Configuring a logging pool

A logging pool is used to define a pool of servers that receive syslog events. The pool contains the IP address, port, and a node name that you provide.

1. From the navigation menu, select Local Traffic > Pools.
2. Click Create.
3. In the Name field, type a name for the logging pool.

   For example, Logging_Pool.

4. From the Health Monitor field, in the Available list, select TCP and click <<.

   This clicking action moves the TCP option from the Available list to the Selected list.

5. In the Resource pane, from the Node Name list, select Logging_Node or the name you defined in Configuring a logging pool.
6. In the Address field, type the IP address for the QRadar® Console or Event Collector.
7. In the Service Port field, type 514.
8. Click Add.
9. Click Finish.