Lab Minutes Forum

Technical Discussion => Security => Topic started by: Jeff on September 01, 2014, 07:06:24 AM

Title: Qradar integration with ACS 5.3
Post by: Jeff on September 01, 2014, 07:06:24 AM

Hi,

Has anyone tried integrating ACS 5.3 with qradar? We have made the changes as per below link but nothing is working. For ACS 4.x and it works fine. Any suggestion? We are using ACS software not appliance.

https://supportforums.cisco.com/document/138571/acs-5x-configuring-external-syslog-server

Also one more thing I observed is when I use cli and check for logging configuration only I can see local logging not qradar ip. Do i need to add IP in acs cli as well or is this bug?

Thanks.

Title: Re: Qradar integration with ACS 5.3
Post by: MC on September 03, 2014, 01:17:22 AM

What does quadra require? Does it just need to see syslog messages from ACS? Have you tried to add the quadra server as external syslog target? You shouldn't need to add any CLI command to make it work nor that it has any relationship to the syslog target you add on the web.