Configuring syslog forwarding

Before events can be received in QRadar, you must configure your Cisco CallManager device to forward events.

Procedure

  1. Log in to your Cisco CallManager.
  2. Select System Enterprise > Parameters.

    The Enterprise Parameters Configuration is displayed.

  3. In the Remote Syslog Server Name field, type the IP address of the QRadar Console.
  4. From the Syslog Severity For Remote Syslog messages list, select Informational.

    This option configures the severity level of the messages that are collected.

  5. Click Save.
  6. Click Apply Config.

What to do next

You are now ready to configure a syslog log source for Cisco CallManager.