Forwarded protocol configuration options

To receive events from another Console in your deployment, configure a log source to use the Forwarded protocol.

The Forwarded protocol is an inbound/passive protocol that is typically used to forward events to another QRadar Console. For example, Console A has Console B configured as an off-site target. Data from automatically discovered log sources is forwarded to Console B. Manually created log sources on Console A must also be added as a log source to Console B with the forwarded protocol.