Hi @KhalidAlharthi,
Advice and answers have been provided in three similar, previously asked questions. If you know the format the other SIEM (QRadar?) expects, please add it here, and we can help you tailor the Splunk output. Since this is a Splunk community forum, however, you're more likely to find expertise in Splunk Enterprise Security than QRadar. If you see the data arriving on the remote system using tcpdump, Splunk has already successfully forwarded the data irrespective of the format.
