Is there a log source extension for Qradar? I would like to send syslog information to our Qradar.

  • 1
  • Question
  • Updated 3 years ago
We have a Qradar Security/Threat Analytics system that we would like the WiFi to push the syslogs to. Currently the Qradar is recording them as Generic Syslog events. If there is a Log source extension that works with the Ruckus then I don't have to build one.
Photo of Chuck Aaker

Chuck Aaker

  • 14 Posts
  • 2 Reply Likes

Posted 3 years ago

  • 1
Photo of Michael Brado

Michael Brado, Official Rep

  • 1979 Posts
  • 275 Reply Likes
Hello Chuck, I'm afraid there is not.
Photo of Chuck Aaker

Chuck Aaker

  • 14 Posts
  • 2 Reply Likes
Does the ZoneDirector support LEEF or is there a document that lists the events and event attributes?
Photo of Michael Brado

Michael Brado, Official Rep

  • 1979 Posts
  • 275 Reply Likes
We provide SNMP MIBs for monitoring devices. I've not seen mention of LEEF.