Adding MEG as a new log source type in QRadar

Follow these steps to configure a new MEG log source type that can send events to QRadar®.

Procedure

  1. From the QRadar Console, click the Admin tab, and then select Data Sources > DSM Editor.
  2. Click Create New, and then follow the prompts to create a new log source type for MEG.
  3. Type IBM MaaS360 Mobile Enterprise Gateway as the log source type name, and then click Save.

What to do next

Define QID definitions for the new MEG log source and then create and categorize MEG log events.