Configuring global logging categories

To configure Cisco ACS to forward log failed attempts to IBM® QRadar®:

Procedure

  1. On the navigation menu, click System Administration > Configuration > Log Configuration > Global.

    The Logging Categories window is displayed.

  2. Select the Failed Attempts logging category and click Edit.
  3. Click Remote Syslog Target.
  4. From the Available targets window, use the arrow key to move the syslog target for QRadar to the Selected targets window.
  5. Click Submit.

    You are now ready to configure the log source in QRadar.