Configuring Asset Manager Log Source on qRadar Server

To add Asset Manager Asset Manager as a qRadar log source . . .

1. Log in to the qRadar server.
2. Click Admin > Log Sources > Add Asset Manager.
3. Update the Log Source.
   
   
   1. Set Log Source Name: Asset Manager
   2. Set Log Source Description: Asset Manager CEF Events
   3. Set Protocol Configuration: Syslog
   4. Set Log Source Identifier: Asset Manager CC System name
   5. Set Log Source Extension: Asset ManagerAsset ManagerCustom_ext
   6. Select Asset Manager under Log Source Group
      
      
4. Click Save.