Cisco Nexus sample event message

Use these sample event messages to verify a successful integration with IBM QRadar.

Cisco Nexus sample message when you use the Syslog protocol

The following sample event message shows a pluggable authentication module (PAM) authentication failed event.

<187>Jul  1 15:21:27 <domain> : 2014 Jul  1 15:21:27.206 CEST: %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication failed for user <user> from <IP> - sshd[XXXX]

The following sample shows a Radius error message.

<187>XXXX: 2016 Jun 30 22:05:09 GMTuno: %RADIUS-3-RADIUS_ERROR_MESSAGE: RADIUS server <IP> failed to respond