Configuring Asset Manager Log Source on qRadar Server

To add Asset Manager Asset Manager as a qRadar log source . . .

  1. Log in to the qRadar server.
  2. Click Admin > Log Sources > Add Asset Manager.
  3. Update the Log Source.

    1. Set Log Source Name: Asset Manager
    2. Set Log Source Description: Asset Manager CEF Events
    3. Set Protocol Configuration: Syslog
    4. Set Log Source Identifier: Asset Manager CC System name
    5. Set Log Source Extension: Asset ManagerSpectreCustom_ext
    6. Select Asset Manager under Log Source Group

  4. Click Save.