HPE ProCurve

You can integrate an HPE ProCurve device with IBM QRadar to record all relevant HPE Procurve events using syslog.

About this task

Take the following steps to configure your HPE ProCurve device to forward syslog events to QRadar.

Procedure

  1. Log into the HPE ProCurve device.
  2. Type the following command to make global configuration level changes.

    config

    If successful, the CLI will change to the following prompt:

    ProCurve(config)#

  3. Type the following command:

    logging <syslog-ip-addr>

    Where: <syslog-ip-addr> is the IP address of QRadar.

  4. To exit config mode, press CTRL+Z.
  5. Type the following command: write mem to save the current configuration to the startup configuration for your HPE ProCurve device.

    You are now ready to configure the log source in QRadar.

What to do next

Adding a log source