Configuring settings for the MEG log source in the QRadar Console

Configure the settings for the MEG log source in the QRadar® Console.

1. From the QRadar Console, click the Admin tab, and then select Data Sources > Log Sources.
2. Click Add to create a log source and define the following settings.

   Setting name	Description
   Log Source Name	MaaS360 MEG@172.16.60.130
   Log Source Description	(Optional setting)
   Log Source Type	IBM MaaS360 Mobile Enterprise Gateway
   Protocol Configuration	Syslog
   Log Source Identifier	Type the IP address or the hostname for MEG.
   Log Source Extension	IBMMaaS360MobileEnterpriseGatewayCustom_ext

3. Click Save.
4. On the Admin tab, click Deploy Changes.

What to do next

Map the MEG event to its equivalent in the QRadar QID map so the MEG events can be categorized and processed by QRadar.