IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

NMS tool that can integrate with QRadar.

  • 1.  NMS tool that can integrate with QRadar.

    Posted Thu May 20, 2021 05:39 AM

    Please help it's very urgent.

    Can anyone tell me a Network Management Software (NMS) that can integrate with QRadar.

    Our company has promised to a client that we provide QRadar along with a NMS software that can integrate with QRadar and forward it logs.



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: NMS tool that can integrate with QRadar.

    Posted Fri May 21, 2021 01:56 PM

    Solarwinds Orion is the only official QRadar DSM that I am aware of that might have this capability to get alerts. As Orion is more of a centralized console for a bunch of Solarwinds sub-products. However, the QRadar DSM collects Alerts from Solarwinds Orion and I don't know if those alerts would have the NMS info you are looking for or not. I've heard that IBM MSS teams use Nagios, but I cannot confirm it, so that might be an investigation method you could look in to as well.

    Technically, anything that produces CEF, JSON, LEEF or Syslog events in RFC4343, RFC 3164, or RFC 5424 is going to be pretty easy to integrate. There is not much out of the box.

    Related question too that might be interesting: https://www.ibm.com/mysupport/s/forumsquestion?language=en_US&id=0D53p00008kHk2tCAC



    #QRadar
    #Support
    #SupportMigration