Syslog log source parameters for SysFlow

If IBM® QRadar® does not automatically detect the log source, add a SysFlow log source on the QRadar Console by using the Syslog protocol.

When you use the Syslog protocol, there are specific parameters that you must configure.

The following table describes the parameters that require specific values to collect Syslog events from SysFlow:
Table 1. Syslog log source parameters for the SysFlow DSM
Parameter Value
Log Source type SysFlow
Protocol Configuration Syslog
Log Source Identifier SysFlow

For a complete list of common protocol parameters and their values, see Adding a log source.