Configuring settings for the MEG log source in the QRadar Console

Follow these steps to configure settings for the MEG log source in the QRadar® Console.

Procedure

  1. From the QRadar Console, click the Admin tab, and then select Data Sources > Log Sources.
  2. Click Add to create a log source by defining the following settings:
    For this setting... Use the following...
    Log Source Name MaaS360 MEG@172.16.60.130
    Log Source Description (optional setting)
    Log Source Type IBM MaaS360 Mobile Enterprise Gateway
    Protocol Configuration Syslog
    Log Source Identifier Type the IP address or the host name for MEG.
    Log Source Extension IBMMaaS360MobileEnterpriseGatewayCustom_ext
    Log source settings
  3. Click Save.
  4. On the Admin tab, click Deploy Changes.

What to do next

Map the MEG event to its equivalent in the QRadar QID map so the MEG events can be categorized and processed by QRadar.