Cisco CatOS for Catalyst Switches
The IBM QRadar DSM for Cisco Catalyst Switches running Cisco CatOS accepts events by using syslog.
QRadar records all relevant device events. Before you configure a Cisco CatOS device in QRadar, you must configure your device to forward syslog events.