TLS Syslog log source parameters IBM Cloud Platform

If IBM QRadar does not automatically detect the log source, add an IBM Cloud Platform log source on the QRadar Console by using the TLS Syslog protocol.

When using the TLS Syslog protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect TLS Syslog events from IBM Cloud Platform:
Table 1. TLS Syslog log source parameters for the IBM Cloud Platform DSM
Parameter Value
Log Source type IBM® Bluemix® Platform
Protocol Configuration TLS Syslog
Log Source Identifier Type the IP address of the IBM Cloud Loggregator.
Important: It might be necessary to include the IP address and the port, as the Log Source Identifier. For example, 192.0.2.1:1513.

For more information about TLS syslog log source parameters, see TLS syslog protocol configuration options.