Configuring QRadar to receive logs from MEG

Configure QRadar® to receive logs from MEG.

Procedure

  1. Log in to the QRadar Console at https://172.16.60.10 with administrator credentials.
  2. Configure MEG to send the MobileGatewayAuth log and the MobileGatewayWebResAuth log to QRadar.
    1. From the Log Activity tab, select Add Filter to view the logs that originate from MEG.
    2. Pause real-time events in the Log Activity view.
    3. Click the event log to view event details.

What to do next

Use the DSM Editor to add MEG as a new log source type in QRadar.