Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

What kind of QRadar messages might an IBM i admin want to see?

  • 1.  What kind of QRadar messages might an IBM i admin want to see?

    Posted 25 days ago

    Let's say you are sending messages to a SIEM like IBM's QRadar from IBM i.  Now you're about to undergo training in getting reports from QRadar.  What are the general messages one might see from QRadar?  These messages get to QRadar from IBM's Syslog Reporting Manager (SRM), etc.

    • Repeated invalid logins?
    • Diskspace messages?
    • Expiring licenses?
    • Hardware errors?



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------