Configuring syslog for Great Bay Beacon

You can configure your Great Bay Beacon Endpoint Profiler to forward syslog events.

Procedure

  1. Log in to your Great Bay Beacon Endpoint Profiler.
  2. To create an event, select Configuration > Events > Create Events.

    A list of currently configured events is displayed.

  3. From the Event Delivery Method pane, select the Syslog check box.
  4. To apply your changes, select Configuration Apply Changes > Update Modules.
  5. Repeat Configuring syslog for Great Bay Beacon to configure all of the events that you want to monitor in IBM QRadar.
  6. Configure QRadar as an external log source for your Great Bay Beacon Endpoint Profiler.

    For information on configuring QRadar as an external log source, see the Great Bay Beacon Endpoint Profiler Configuration Guide.

    You are now ready to configure the log source in QRadar.