Syslog log source parameters for SysFlow
If IBM® QRadar® does not automatically detect the log source, add a SysFlow log source on the QRadar Console by using the Syslog protocol.
When you use the Syslog protocol, there are specific parameters that you must configure.
The following table describes the parameters that require specific values to collect Syslog
events from SysFlow:
Parameter | Value |
---|---|
Log Source type | SysFlow |
Protocol Configuration | Syslog |
Log Source Identifier | SysFlow |
For a complete list of common protocol parameters and their values, see Adding a log source.