Syslog data source parameters for IBM Guardium
If IBM® Security QRadar® Log Insights does not automatically detect the data source, add an IBM BigFix® data source in QRadar Log Insights by using the Syslog connector.
When using the Syslog connector, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect Syslog
events from IBM Guardium:
Parameter | Value |
---|---|
Data Source type | IBM Guardium |
Connector Configuration | Syslog |
Data Source Identifier | Type the IP address or host name for the IBM InfoSphere Guardium appliance. |
For more information about adding a data source in QRadar Log Insights, see Adding ingestion data sources.