Hello Mourad,
Have you tried using the JDBC Protocol?,
https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/c_logsource_JDBCprotocol.html?cp=SS42VS_7.3.2It does support Postgres, all depending what application uses the database the logs will be different. The first step is to collect the logs and then create a parser. For all supported applications and solutions we have explicit instructions on how to collect those logs. I am assuming you are trying to collect custom application logs.
Give it a try by using the Universal DSM and selecting JDBC protocol.
------------------------------
Eduardo Torreblanca
------------------------------
Original Message:
Sent: 03-05-2019 07:40 AM
From: Mourad EL HADOUMI
Subject: Postgres audit integration
Hello,
We need to integrate the audit logs of a postgres database to QRadar but we have not found any documentation. Is there someone to help us do this integration?
Thanks in advance.
Best regards.
------------------------------
Mourad EL HADOUMI
------------------------------