Configuring global logging categories
To configure Cisco ACS to forward log failed attempts to IBM® QRadar®:
On the navigation menu, click
The Logging Categories window is displayed.
- Select the Failed Attempts logging category and click Edit.
- Click Remote Syslog Target.
- From the Available targets window, use the arrow key to move the syslog target for QRadar to the Selected targets window.
You are now ready to configure the log source in QRadar.