Syslog log source parameters for Venustech Venusense

If QRadar does not automatically detect the log source, add a Venustech Venusense log source on the QRadar Console by using the Syslog protocol.

When using the Syslog protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Syslog events from Venustech Venusense:

Table 1. Syslog log source parameters for the Venustech Venusense DSM
Parameter	Value
Log Source type	Select your Venustech Venusense appliance from the list. The type of log source that you select is determined by the event filter that is configured on your Venusense appliance. The options include the following types: Venustech Venusense Security Platform - Select this option if you enabled all event filter options. Venustech Venusense UTM - Select this option if you enabled unified filtering events. Venustech Venusense Firewall - Select this option if you enabled filtering for firewall events. Venustech Venusense NIPS - Select this option if you enabled filtering for firewall events.
Protocol Configuration	Syslog
Log Source Identifier	The IP address or hostname for your Venusense appliance. The log source identifier must be a unique value.