IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Same Log source added two times

    Posted 09/03/20 03:21 AM
    Same log source is added two times and giving different events, one discovery method was auto discovery and other one was manually discovered and these both same log source is giving different events.

    ------------------------------
    Ather Mobeen
    ------------------------------


  • 2.  RE: Same Log source added two times

    Posted 09/04/20 12:03 PM
    Normally a log source can not exist multiple times, given the identifier and log source type are also the same. There can be multiple log sources for one identifier, given they are all different log source types, for example one Juniper FW log source and a Linux log source with the same hostname as identifier.

    For your case, can you check if the identifier is exactly the same. If yes, is also the log source type the same?


  • 3.  RE: Same Log source added two times

    Posted 09/06/20 05:56 AM
    can u provide any source to get more info about this issue.

    ------------------------------
    Preeti Batra
    ------------------------------

    Original Message


  • 4.  RE: Same Log source added two times

    Posted 09/10/20 02:37 AM
    The issue is resolved from changing the log parsing order of the devices that are added two times.

    ------------------------------
    Ather Mobeen
    ------------------------------

    Original Message


Related Content