Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.
The following is an export of a LSX I used to parsed data from a Barracuda FXX firewall, to make sure the Custom DSM will work you have to enable "Cluster Info" logging under Configuration Tree > Infraestructure Services > Syslog Streaming > LogStream Destinations > "Add Range/Cluster Info" toggle to "Yes".Once the Custom DSM is enable QRadar will be able to understand some of most important security related events, in addition to some DHCP events and more.