I have created a Wed feed with Web log and Qradar LEEF format. And it successfully received the log.
Then I created a similar web feed with Admin Audit log but it doesn’t have LEEF format. Therefore I have selected all available formats but still not working.
Do I have to use another way to get ZIA’s audit log? How can ZIA send audit log to Qradar without using wed feed?
Thank you very much.