IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Configure API push logs BitDefender Gravityzone

    Posted 04/04/24 02:41 PM

    Hello community!

    I'm trying to set up log delivery from the Bitdefender Gravityzone SaaS console but I'm having trouble.

    Has anyone here already configured it?

    I have doubts regarding the certificate that I need to configure in the log source parameters and also the authentication issue for calling the API.

    I'm attaching some and if anyone has an example of how to configure it, I'd be grateful.

    Thanks!



    ------------------------------
    Felipe França
    ------------------------------


  • 2.  RE: Configure API push logs BitDefender Gravityzone

    Posted 04/25/24 09:07 AM

    Hello community!

    For me facing the same issue. anyone can share update here.



    ------------------------------
    siva krishna
    ------------------------------



  • 3.  RE: Configure API push logs BitDefender Gravityzone

    Posted 06/17/24 08:55 PM

    Any update for troubleshoot the issue ? 



    ------------------------------
    siva krishna
    ------------------------------



  • 4.  RE: Configure API push logs BitDefender Gravityzone

    Posted 01/22/25 06:29 AM

    tengo el mismo problema, alguien lo solucionó?



    ------------------------------
    Natalia Ochoa
    ------------------------------



  • 5.  RE: Configure API push logs BitDefender Gravityzone

    Posted 01/22/25 08:22 AM

    Hello,

    For me it worked following this documentation

    https://www.bitdefender.com/business/support/en/77209-135319-setpusheventsettings.html

    I created a new log source with the port I chose for the GravityZone IPs and via API I defined the settings.


    I tried using the message pattern but it didn't work correctly

    The way the logs arrive was also not in the best possible shape, as a single log sometimes contains 2 or more different types of logs.
    The message pattern should solve the problem, but it doesn't work.



    ------------------------------
    Jonathas Pessoa
    ------------------------------