Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
we have do the configuration on Cisco Ironport like picture below. but from Qradar we still can't have one whole logs, still separate to multiple logs.
