FreeRADIUS
The IBM QRadar DSM for FreeRADIUS collects events from your FreeRADIUS device.
The following table lists the specifications for the FreeRADIUS
DSM:
| Specification | Value |
|---|---|
| Manufacturer | FreeRADIUS |
| DSM name | FreeRADIUS |
| RPM file name | DSM-FreeRADIUS-Qradar_version-build_number.noarch.rpm |
| Supported versions | V2.x |
| Event format | Syslog |
| Recorded event types | All events |
| Automatically discovered? | Yes |
| Includes identity? | Yes |
| Includes custom properties? | No |
| More information | FreeRADIUS website (http://freeradius.org) |
To send logs from FreeRADIUS to QRadar,
complete the following steps:
- If automatic updates are not enabled, download and install the most recent version of the FreeRADIUS DSM RPM from the IBM® Support Website onto your QRadar Console.
- Configure your FreeRADIUS device to send syslog events to QRadar.
- If QRadar does
not automatically detect the log source, add a FreeRADIUS log source
on the QRadar Console.
The following table describes the parameters that require specific
values for FreeRADIUS event collection:
Table 2. FreeRADIUS log source parameters Parameter Value Log Source type FreeRADIUS Protocol Configuration Syslog