Configuring a Venusense syslog server

To forward events to IBM QRadar, you must configure and enable a syslog server on your Venusense appliance with the IP address of your QRadar Console or Event Collector.

Procedure

  1. Log in to the configuration interface for your Venusense appliance.
  2. From the navigation menu, select Logs > Log Configuration > Log Servers.
  3. In the IP Address field, type the IP address of your QRadar Console or Event Collector.
  4. In the Port field, type 514.
  5. Select the Enable check box.
  6. Click OK.

What to do next

You are ready to configure your Venusense appliance to filter which events are forwarded to QRadar.