SYSLOG events from MX security appliance to QRadar SIEM

[Pcozzi70]

We are sending syslog events from our Meraki MX84 (v.MX 18.107) to QRadar Event Collector.
All the Roles for that syslog server have been enabled in Meraki dashboard.
Though we are not able to get any info on client VPN login/logout/etc.

Is there any method to get these info via syslog or anyway on a remote SIEM event collector?

Thanks in advance

Paolo

[alemabrahao]

The informations that you can receive via syslog are limited. Take a look at the documentation.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Repor...

[Pcozzi70]

Yes I have already seen that page.

Do you think is there any method via webhooks/API to get infos about VPN client connection/disconnection as I see on dashboard event log?

Thanks