Cisco IronPort

The IBM® Security QRadar® Log Insights data source type for Cisco IronPort retrieves logs from Cisco IronPort.

To integrate Cisco IronPort with QRadar, complete the following steps:

  1. Configure Cisco IronPort to communicate with QRadar Log Insights.
  2. Optional: Add a Cisco IronPort data source by using the Log File connector.
  3. Optional: Add a Cisco IronPort data source by using the Syslog connector.

For more information about adding a data source in QRadar Log Insights, see Adding ingestion data sources.

If you are an IBM QRadar user, see Terminology changes for QRadar customers.