Configuring syslog events

To configure a CyberGuard device to forward syslog events:

Procedure

  1. Log in to the CyberGuard user interface.
  2. Select the Advanced page.
  3. Under System Log, select Enable Remote Logging.
  4. Type the IP address of IBM QRadar.
  5. Click Apply.

    The configuration is complete. The log source is added to QRadar as CyberGuard events are automatically discovered. Events that are forwarded by CyberGuard appliances are displayed on the Log Activity tab of QRadar.