Sophos Enterprise Console JDBC log source parameters for Sophos Enterprise Console

If QRadar does not automatically detect the log source, add a Sophos Enterprise Console log source on the QRadar Console by using the Sophos Enterprise Console JDBC protocol.

When using the Sophos Enterprise Console JDBC protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Sophos Enterprise Console JDBC events from Sophos:

Table 1. Sophos Enterprise Console JDBC log source parameters for the Sophos Enterprise Console DSM
Parameter	Value
Log Source type	Sophos Enterprise Console
Protocol Configuration	Sophos Enterprise Console JDBC
Log Source Identifier	Type the identifier for the log source. Type the log source identifier in the following format: `<Sophos Database>@<Sophos Database Server IP or Host Name>` Where: <`Sophos Database`> is the database name, as entered in the Database Name parameter. <`Sophos Database Server IP or Host Name`> is the host name or IP address for this log source, as entered in the IP or Hostname parameter. When you define a name for your log source identifier, you must use the values of the Sophos Database and Database Server IP address or host name from the Management Enterprise Console.

For a complete list of Sophos Enterprise Console JDBC protocol parameters and their values, see Sophos Enterprise Console JDBC protocol configuration options.