VMware vCloud Director log source parameters for VMware vCloud Director

If QRadar does not automatically detect the log source, add a VMware vCloud Director log source on the QRadar Console by using the VMware vCloud Director protocol.

When using the VMware vCloud Director protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect VMware vCloud Director events from VMware vCloud Director:
Table 1. VVMware vCloud Director log source parameters for the VMware vCloud Director DSM

Parameter

Description

Log Source Name (Optional) A unique name for your log source.
Log Source Description (Optional) A description for your log source.
Log Source Type VMware vCloud Director
Protocol Configuration VMware vCloud Director
Enabled

Select this checkbox to enable the log source. By default, the checkbox is selected.

Credibility

From the list, select the credibility of the log source. The range is 0 - 10.

The credibility indicates the integrity of an event or offense as determined by the credibility rating from the source devices. Credibility increases if multiple sources report the same event. The default is 5.

Target Event Collector

From the list, select the Target Event Collector to use as the target for the log source.

Coalescing Events

Select this checkbox to enable the log source to coalesce (bundle) events.

By default, automatically discovered log sources inherit the value of the Coalescing Events list from the System Settings in QRadar. When you create a log source or edit an existing configuration, you can override the default value by configuring this option for each log source.

Incoming Event Payload

From the list, select the incoming payload encoder for parsing and storing the logs.

Store Event Payload

Select this checkbox to enable the log source to store event payload information.

By default, automatically discovered log sources inherit the value of the Store Event Payload list from the System Settings in QRadar. When you create a log source or edit an existing configuration, you can override the default value by configuring this option for each log source.

For a complete list of VMware vCloud Director protocol parameters and their values, see VMware vCloud Director protocol configuration options.