Microsoft Azure log source parameters for Microsoft Azure Event Hubs
If QRadar does not automatically detect the log source, add a Microsoft Azure Event Hubs log source on the QRadar Console by using the Microsoft Azure protocol.
When using the Microsoft Azure protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect Microsoft
Azure events from Microsoft Azure Event Hubs:
Parameter | Description |
---|---|
Log Source type | Microsoft Azure |
Protocol Configuration | Microsoft Azure Event Hubs |
Log Source Identifier |
An identifiable name or IP address for the log source. When the Use as Gateway Log Source field is selected, the Log Source Identifier value is not used. |
For a complete list of Microsoft Azure Event Hubs protocol parameters and their values, see Microsoft Azure Event Hubs protocol configuration options.