TLS Syslog log source parameters for BeyondTrust PowerBroker

If QRadar does not automatically detect the log source, add a BeyondTrust PowerBroker log source on the QRadar Console by using the TLS Syslog protocol.

When using the TLS Syslog protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect TLS Syslog events from BeyondTrust PowerBroker:
Table 1. TLS Syslog log source parameters for the BeyondTrust PowerBroker DSM
Parameter Value
Log Source type BeyondTrust PowerBroker
Protocol Configuration TLS Syslog
Log Source Identifier Type a unique IP address or host name.