Niksun

The Niksun DSM for IBM QRadar records all relevant Niksun events by using the syslog protocol.

You can integrate NetDetector/NetVCR2005, version 3.2.1sp1_2 with QRadar. Before you configure QRadar to integrate with a Niksun device, you must configure a log source and then enable syslog forwarding on your Niksun appliance. For more information about configuring Niksun, see your Niksun appliance documentation.

Syslog log source parameters for Niksun

If QRadar does not automatically detect the log source, add a Niksun log source on the QRadar Console by using the syslog protocol.

The following table describes the parameters that require specific values to collect syslog events from Niksun:

Table 1. Syslog log source parameters for the Niksun DSM
Parameter	Value
Log Source type	Niksun 2005 v3.5
Protocol Configuration	Syslog
Log Source Identifier	Type the IP address or host name for the log source as an identifier for events from your Niksun appliance.