System Event Timeout
The Syslog Event Timeout parameter is the amount of time, in minutes, before the status of a syslog device is recorded as an error if no events are received within the timeout period. The status is displayed on the Log Sources window.
You can now configure the value of the System Event Timeout parameter per log source, or continue to use the default timeout configured in the system settings. For more information, see Configuring system settings.
Configuring options for individual log source
- Default
- Use the configuration value from system settings. The default value is 720.
- No timeout
- The log source never enters an error state.
- Custom timeout
- Configure a timeout, in minutes, after which this specific log source enters an error state.
Starting with QRadar® Log Source Management v7.0.12, the System Event Timeout parameter is available when creating and editing log sources within QRadar Log Source Management.