If IBM
QRadar does
not automatically detect the log source, add Juniper Mist log source on QRadar
Console by using the Syslog
protocol.
Procedure
-
If automatic updates are not enabled, download and install the most recent version of the
following RPMs from the IBM® Support Website onto your QRadar
Console.
-
Configure your Juniper Mist device to send syslog events to QRadar.
-
Add a Syslog log source on the QRadar
Console.
The following table describes the parameters that require specific values to collect Syslog
events from Juniper Mist by using the Syslog protocol:
Table 1. Syslog protocol log source parameters
| Parameter |
Description |
| Log Source Type |
Juniper Mist |
| Protocol Configuration |
Syslog |
| Log Source Identifier |
Type the IP address or host name for the Juniper Mist. |