Qradar log forwarding with Extreme NAC

[Jithishkk]

Hello Team,

We are trying to forward the logs received in Extreme NAC to Qradar. We have added in the Qradar IP and port details.

We are receiving only header information from the Extreme NAC.

1. Any addition configuration required?

2. What is the Syslog format shared by Extreme NAC to Qradar.

Note : Qradar is receiving logs in LEEF format. 

[Jithishkk]

To add , Qradar is expecting the logs in LEEF format.

[Adam_Minowski]

Please check this out

SIEM configuration is refering directly to QRadar as QRadar was Extreme SIEM a time ago.