Is there a log source extension for Qradar? I would like to send syslog
information to our Qradar.

Question

We have a Qradar Security/Threat Analytics system that we would like the WiFi to push the syslogs to.  Currently the Qradar is recording them as Generic Syslog events. If there is a Log source extension that works with the Ruckus then I don't have to build one.

michael_brado · Answer

We provide SNMP MIBs for monitoring devices.  I've not seen mention of LEEF.

unknown · Answer

Does the ZoneDirector support LEEF or is there a document that lists the events and event attributes?

michael_brado · Answer

Hello Chuck, I'm afraid there is not.