IBM
C2150-400 · Question #43
You have been asked to forward all event logs fromQRadarto another central syslog server with the IP of 172.16.77.133. You also want the events to be processed by the CRE,but not stored on the…
The correct answer is A. Add a Routing Rule that under Current Filters "Matches All Incoming Events", under Routing Options. See the full explanation below for the reasoning.
Question
You have been asked to forward all event logs fromQRadarto another central syslog server with the IP of 172.16.77.133. You also want the events to be processed by the CRE,but not stored on the system. What will allow you to do this process?
Options
- AAdd a Routing Rule that under Current Filters "Matches All Incoming Events", under Routing Options,
- BAdd a Routing Rule that, under Current Filters "Matches All Incoming Events", under Routing Options,
- CAdd a forwarding Destination for 172.16.77.133 with the "Raw Event" format.
- DAdd a forwarding Destination for 172.16.77.133 with the "Normalized Event" format.
How the community answered
(39 responses)- A77% (30)
- B8% (3)
- C13% (5)
- D3% (1)
Community Discussion
No community discussion yet for this question.