IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Has amyone be able to send Tomcat logs to syslog so the could be sent to QRadar SIEM

    Posted 04/19/21 08:13 PM

    We have several servers running Apache Tomcat and we want to be able to send Tomcat logs to our QRadar SIEM. I am not finding a DSM for Tomcat and would like to know if anyone has been successful doing this?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Has amyone be able to send Tomcat logs to syslog so the could be sent to QRadar SIEM

    Posted 07/16/21 06:36 PM

    You can try to create a UDSM and use the DSM editor to parse the events

    https://www.ibm.com/docs/en/dsm?topic=lse-creating-log-source-extensions-document-get-data-into-qradar

    or you can contact the IBM Security Lab experts

    https://www.ibm.com/security/security-expert-labs



    #QRadar
    #Support
    #SupportMigration


Related Content