Configuring QRadar to receive logs from MEG

Follow these steps to configure QRadar® to receive logs from MEG.

Procedure

  1. Log in to the QRadar Console at https://172.16.60.10 with administrator credentials.
    QRadar Console login screen
  2. Configure MEG to send the MobileGatewayAuth log and the MobileGatewayWebResAuth log to QRadar:
    1. From the Log Activity tab, select Add Filter to view the logs that originate from MEG.
      Add Filter screen in QRadar
    2. Pause real-time events in the Log Activity view.
    3. Click the event log to view event details.
      Event log details

What to do next

Use the DSM Editor to add MEG as a new log source type in QRadar.