The IBM® QRadar® DSM for Cisco IOS accepts Cisco IOS events by using syslog. QRadar records all relevant events.
The following Cisco switches and routers are automatically discovered as Cisco IOS series devices, and their events are parsed by the DSM for Cisco IOS:
- Cisco 12000 Series Routers
- Cisco 6500 Series Switches
- Cisco 7600 Series Routers
- Cisco Carrier Routing System
- Cisco Integrated Services Router.
Make sure that all access control lists (ACLs) are set to LOG.