IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Develop a new DSM and Protocol.

    Posted Fri February 24, 2023 03:25 PM

    I am looking to develop a new DSM Parser and Protocol for my work for QRadar SIEM. Could you kindly let me know how to do that. I have events coming from a hostname using RESTAPI and the protocol should have multiple configuration options. Like each event Log source will have its own configuration with the same hostname but different client id and client secret. Could you kindly let me know how to go about this.



    ------------------------------
    Krishna Rangampally
    ------------------------------


  • 2.  RE: Develop a new DSM and Protocol.

    Posted Mon February 27, 2023 12:07 PM

    Please use security learning academy 

    https://www.securitylearningacademy.com/enrol/index.php?id=5624



    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


Related Content