Tenable Identity Exposure Configuration
Complete the following steps to configure the Tenable Identity Exposure App For QRadar.
To create a log source, through the Log Source Management application for ingesting data, from the Tenable platform:
-
Go to the QRadar Log Source Management application in the Admin panel.
The Log Source Management page appears.
-
Click + New Log Source in the upper-right.
The Add a Single Log Source page appears.
-
Select Tenable.ad as the Log Source type.
-
Select Syslog as the protocol type.
-
In the Configure Log Source Parameters section, enter the name of the log source in the Name box.
-
In the Configure Protocol Parameters section, enter the Log Source Identifier. This Identifier is the hostname/IP address from the data to be forwarded.
-
Click Finish.