Configuring Venusense event filtering

Event filtering determines which events your Venusense appliance forwards to IBM QRadar.

Procedure

  1. From the navigation menu, select Logs > Log Configuration > Log Filtering.
  2. In the Syslog Log column, select a check box for each event log you want to forward to QRadar.
  3. From the list, select a syslog facility for the event log you enabled.
  4. Repeat Configuring Venusense event filtering and Configuring Venusense event filtering to configure any additional syslog event filters.
  5. Click OK.

What to do next

You can now configure a log source for your Venusense appliance in QRadar. QRadar does not automatically discover or create log sources for syslog events from Venusense appliances.