IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

PostgreSQL Custom Query Integration - IBM Security QRadar

  • 1.  PostgreSQL Custom Query Integration - IBM Security QRadar

    Posted Fri November 12, 2021 07:34 AM
    Hi All!
    I have been trying to pull logs from a PostgreSQL table. All access has been granted and connection to the database is successful. My only problem is that how can I run custom queries other than the default ones included in the JDBC connectors configuration since it doesn't bring the right information I'm looking for.

    ------------------------------
    Raed Alghamdi
    ------------------------------


  • 2.  RE: PostgreSQL Custom Query Integration - IBM Security QRadar

    Posted Mon November 15, 2021 05:42 AM
    Raed, hopefully I did not misunderstand this... Is this for a custom DSM using JDBC to pull events from the PostgreSQL DB ? I recall that you have the option to enter in the log source definition the DB name from which you will pull events and if no predefined query is used you should be able to enter the Select list ("The list of fields to include when the table is polled for events"). Otherwise, I guess the option would be to create a view on the DB side from which you would pull the wished content.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------