IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Logs collection from Mysql table

    Posted 10/04/21 06:14 AM
    Hey everyone.
    I send logs to an mysql database. Logs are stored as a raw data in tables in MySQL database. I need to send those logs from this table to qradar

    ------------------------------
    naeel mostafa
    ------------------------------


  • 2.  RE: Logs collection from Mysql table

    Posted 10/05/21 06:40 AM
    You can use the universal log source or any other DSM for that matter, and the JDBC protocol to pull the events.  If you are using SSL to connect to the SQL there could be some certificate stuff that has to be done.  Otherwise tell it the database and table and a comparison value for the last event pulled.  That is all there is to it.

    ------------------------------
    Frank Eargle
    ------------------------------



  • 3.  RE: Logs collection from Mysql table

    Posted 10/05/21 07:43 AM
    Just to add to Frank's note : since it is MySQL, (if not done already) you might need to download the MySQL connector for RedHat linux - see this article.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------



Related Content