The IBM® Security QRadar® Log Insights data source type for Cisco IronPort retrieves logs from Cisco IronPort.
To integrate Cisco IronPort with QRadar, complete the following steps:
- Configure Cisco IronPort to communicate with QRadar Log Insights.
- Optional: Add a Cisco IronPort data source by using the Log File connector.
- Optional: Add a Cisco IronPort data source by using the Syslog connector.
For more information about adding a data source in QRadar Log Insights, see Adding ingestion data sources.
If you are an IBM QRadar user, see Terminology changes for QRadar customers.