TLS Syslog log source parameters IBM Cloud Platform
If IBM QRadar does not automatically detect the log source, add an IBM Cloud Platform log source on the QRadar Console by using the TLS Syslog protocol.
When using the TLS Syslog protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect TLS Syslog
events from IBM Cloud Platform:
Parameter | Value |
---|---|
Log Source type | IBM® Bluemix® Platform |
Protocol Configuration | TLS Syslog |
Log Source Identifier | Type the IP address of the IBM Cloud Loggregator. Important: It might be necessary
to include the IP address and the port, as the Log Source Identifier. For example,
192.0.2.1:1513.
|
For more information about TLS syslog log source parameters, see TLS syslog protocol configuration options.