You can configure the Cisco Wireless LAN Controller to forward syslog events to IBM®
QRadar®.
Procedure
-
Log in to your Cisco Wireless LAN Controller interface.
-
Click the Management tab.
-
From the menu, select .
-
In the Syslog Server IP Address field, type the IP address of your QRadar
Console.
-
Click Add.
-
From the Syslog Level list, select a logging level.
The Information logging level allows the collection of all Cisco Wireless
LAN Controller events above the Debug logging level.
-
From the Syslog Facility list, select a facility level.
-
Click Apply.
-
Click Save Configuration.
What to do next
You are now ready to configure a syslog log source for Cisco Wireless LAN Controller.