TLS Syslog log source parameters for Trend Micro Vision One

If IBM QRadar does not automatically detect the log source, add a Trend Micro Vision One log source on the QRadar Console by using the TLS syslog protocol.

When you use the TLS syslog protocol, there are specific parameters that you must configure.

The following table describes the parameters that require specific values to collect TLS syslog events from Trend Micro Vision One:
Table 1. TLS syslog log source parameters for the Trend Micro Vision One DSM
Parameter Value
Log Source type Trend Micro Vision One
Protocol Configuration TLS Syslog
Log Source Identifier A unique name to identify the log source.
TLS Protocols Select the version of TLS that is installed on the client.

For a complete list of TLS syslog protocol parameters and their values, see TLS syslog protocol configuration options.