Is there a log source extension for Qradar? I would like to send syslog information to our Qradar.

[chuck_aaker]

We have a Qradar Security/Threat Analytics system that we would like the WiFi to push the syslogs to. Currently the Qradar is recording them as Generic Syslog events. If there is a Log source extension that works with the Ruckus then I don't have to build one.

[michael_brado]

Hello Chuck, I'm afraid there is not.

[chuck_aaker]

Does the ZoneDirector support LEEF or is there a document that lists the events and event attributes?

[michael_brado]

We provide SNMP MIBs for monitoring devices. I've not seen mention of LEEF.