Which Log Source Type should be used to add a Log Source with Log Source Extension?
A. Any
B. Custom
C. Universal DSM
D. Log Source Extension
Which Log Source Type should be used to add a Log Source with Log Source Extension?
A. Any
B. Custom
C. Universal DSM
D. Log Source Extension
There is nothing on page 12 of the supplied reference that is related to log source extensions.
However on page 8:
“The Log Source Extension parameter only appears if you have a log source extension configured in your deployment.”
So I believe the answer is A.Any.
Because Any log source can have a Log Source Extension, IF you create it. by default there are no Log Source Extensions created in QRadar.