Configuring a log source

You can configure the log source in IBM QRadar to receive events from a Symantec DLP appliance.

About this task

QRadar automatically detects syslog events for the SMTP and None of SMTP response rules that you create. However, if you want to manually configure QRadarto receive events from a Symantec DLP appliance:

Procedure

From the Log Source Type list, select the Symantec DLP option.

For more information about Symantec DLP, see your vendor documentation.