Configuring syslog for Cisco Wireless LAN Controller

You can configure the Cisco Wireless LAN Controller to forward syslog events to IBM QRadar.

Procedure

  1. Log in to your Cisco Wireless LAN Controller interface.
  2. Click the Management tab.
  3. From the menu, select Logs > Config.
  4. In the Syslog Server IP Address field, type the IP address of your QRadar Console.
  5. Click Add.
  6. From the Syslog Level list, select a logging level.

    The Information logging level allows the collection of all Cisco Wireless LAN Controller events above the Debug logging level.

  7. From the Syslog Facility list, select a facility level.
  8. Click Apply.
  9. Click Save Configuration.

What to do next

You are now ready to configure a syslog log source for Cisco Wireless LAN Controller.