cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
972
Views
0
Helpful
2
Replies

Query Regarding Cisco Prime Infrastructure Syslog server (qradar)

BhaskarDS
Level 1
Level 1

Hi,

I have a query regarding the syslog server of Prime. 

Our end client is having IBM Qradar syslog server. And they have configured that in the Cisco Prime Infrastructure. However, no logs are being sent to the syslog server from the prime. It hasn't worked anytime.

 

Now I want to know if IBM qradar is compatible with Cisco Prime Infrastructure ? I am not getting any document where it shows what 3rd party syslog server is supported in prime. 

 

Can anyone help me in this ?

 

Prime version: 3.3.1

 

 

 

 

2 Replies 2

marce1000
VIP
VIP

 

 - As  far as the syslog-protocol is concerned, it should always be compatible, try another syslog server as a sanity check.

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

As @marce1000 says syslog is a standard so there should not be any question of compatibility.
It's much more likely to be a problem with the Prime configuration or possibly the syslog server configuration or maybe you have ACLs or firewall between the 2 servers blocking the syslog traffic (and presume the Prime server has a route to reach the syslog server)?
Review Cisco Networking products for a $25 gift card