Trend Micro Deep Security sample event message
Use this sample event message to verify a successful integration with IBM® QRadar®.
Important: Due to formatting issues, paste the message format into a text editor and then remove any carriage returns or line feed characters.
Trend Micro Deep Security sample message when you use the Syslog protocol
The following sample event message shows an attempt to scan a computer, or that a network was detected.
<182>Jul 14 01:32:31 trendmicro.deepsecurity.test LEEF:2.0|Trend Micro|Deep Security Manager|11.0.221|851|cat=System name=Reconnaissance Detected: Network or Port Scan desc=The Agent/Appliance detected an attempt to scan a computer or a network. Check the Agent/Appliance Events to see the details of the scan. sev=6 src=192.168.187.196 usrName=qradar target=testTarget6 msg=The Agent/Appliance detected an attempt to scan a computer or a network. Chek the Agent/Appliance Events to see the details of the scan. TrendMicroDsTenant=Primary TrendMicroDsTenantId=0