EMC VMware protocol configuration options

To receive event data from the VMWare web service for virtual environments, configure a log source to use the EMC VMware protocol.

The EMC VMware protocol is an outbound/active protocol.

IBM QRadar supports the following event types for the EMC VMware protocol:
  • Account Information
  • Notice
  • Warning
  • Error
  • System Informational
  • System Configuration
  • System Error
  • User Login
  • Misc Suspicious Event
  • Access Denied
  • Information
  • Authentication
  • Session Tracking
The following table describes the protocol-specific parameters for the EMC VMware protocol:
Table 1. EMC VMware protocol parameters
Parameter Description
Protocol Configuration EMC VMware
Log Source Identifier The value for this parameter must match the VMware IP parameter.
VMware IP The IP address of the VMWare ESXi server. The VMware protocol appends the IP address of your VMware ESXi server with HTTPS before the protocol requests event data.