Exporting Logs from Secret Server

To export event logs from Secret Server to QRadar, begin by logging in to the Secret Server as an Administrator.

1. From the ADMIN menu, select Configuration.

2. Scroll to the bottom of the page and select Edit.

3. Select the Enable Syslog/CEF Logging check box and fill in the QRadar Server IP, Port, Protocol (for example, TCP) fields before selecting Save.

4. Data will immediately begin flowing to your QRadar instance.