topic Re: Qradar log forwarding with Extreme NAC in Member Resources

Qradar log forwarding with Extreme NAC

Jithishkk — Mon, 17 Jul 2023 15:28:01 GMT

Hello Team,

We are trying to forward the logs received in Extreme NAC to Qradar. We have added in the Qradar IP and port details.

We are receiving only header information from the Extreme NAC.

1. Any addition configuration required?

2. What is the Syslog format shared by Extreme NAC to Qradar.

Note : Qradar is receiving logs in LEEF format.

Jithishkk — Mon, 17 Jul 2023 15:29:07 GMT

To add , Qradar is expecting the logs in LEEF format.

Adam_Minowski — Tue, 25 Jul 2023 12:18:10 GMT

Please check this out

SIEM configuration is refering directly to QRadar as QRadar was Extreme SIEM a time ago.