Extreme XSR Security Router

The Extreme XSR Security Router DSM for IBM QRadar accepts events by using syslog.

About this task

QRadar records all relevant events. Before you configure an Extreme XSR Security Router in QRadar, you must configure your device to forward syslog events.

For more information about your Extreme XSR Security Router, see your vendor documentation.

To configure the device to send syslog events to QRadar:

Procedure

  1. Using Telnet or SSH, log in to the XSR Security Router command-line interface.
  2. Type the following commands to access config mode:

    1. enable

    2. config

  3. Type the following command:

    logging <IP address> low

    Where: <IP address> is the IP address of your QRadar.

  4. Exit from config mode.

    exit

  5. Save the configuration:

    copy running-config startup-config

    You are now ready to configure the log sources in QRadar.