HI, I am new to this technology

customer is going to give us the log file which contains the data like below:

Event,USER_ID,USER_NAME,LAST_UPDATE_DATE,CREATED_BY

User Created,12345,abc,15-FEB-21,John

Now question is how to integrate it with QRadar and how to parse the fields

Hi Rashid

I believe this will be helpful for the queries how to parse the events in case of custom Universal DSM.

QRadar DSM Editor Tutorial Part One

https://www.youtube.com/watch?v=LRhNMejQFNM

DSM Guide

ftp://ftp.software.ibm.com/software/security/products/qradar/documents/iTeam_addendum/b_dsm_guide.pdf

Thanks.

Brian.