Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

  • 1.  AirWatch LSX

    Posted Wed October 31, 2018 11:01 AM
    Hi QRadar Community,

    I have been tasked with working on parsing ingested AirWatch logs, however I am running into a few issues.  Has anyone had any luck parsing these types of logs in the past?  If so, can any guidance please be provided?  I'm not asking/looking for the actual answer, as I would like to figure this out on my own, as this is certainly a learning topic for me.

    I appreciate all the help.

    ------------------------------
    J
    ------------------------------


  • 2.  RE: AirWatch LSX

    Posted Thu November 01, 2018 04:10 AM
    ​Hello, unfortunately no standard DSM is available for Airwatch events. In this cas you should use the DSM Editor (under Admin - Data Sources menu) to create your custom DSM.
    I don't have experienc with Airwatch but I already created mutliple custom DSM using the DSM Editor.

    Regards

    ------------------------------
    Andrea Matasci
    ------------------------------

    Original Message