Syslog log source parameters for Cisco IOS

Add a Cisco IOS data source in the QRadar® product by using the syslog connector.

When using the syslog connector, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect syslog events from a Cisco IOS device:
Table 1. Syslog data source source parameters for the Cisco IOS data source type
Parameter Value
Data source type Select one of the following devices:
  • Cisco IOS
  • Cisco 12000 Series Routers
  • Cisco 6500 Series Switches
  • Cisco 7600 Series Routers
  • Cisco Carrier Routing System
  • Cisco Integrated Services Router
Connector type Syslog
Data source identifier Type the IP address or host name for the log source.

The identifier helps you determine which events came from your Cisco IOS device.

For more information about adding a data source in the QRadar product, see Adding ingestion data sources.