IBM Security QRadar

 View Only

  • 1.  Event Collector Certificate file/Private Key

    Posted Thu May 30, 2024 10:09 AM

    Hi SMEs, i am looking for below files over QRadar EC which is responsible for log collection from one of the log source which says to upload the files in order to send logs to QRadar, sharing the snap shot and the name of files listed there. Could you please suggest where to look into these files

    1- Remote System Log CA Certificate File 
    2- Remote System Log Certificate File 
    3- Remote System Log Private Key



    ------------------------------
    Pavan Mishra
    ------------------------------


  • 2.  RE: Event Collector Certificate file/Private Key

    Posted Thu May 30, 2024 11:13 AM

    Hi Pavan

    What type of logsource are you trying to integrate?

    Those files will reside somewhere on the remote server from which you are trying to integrate.

    You can review the DSM guide which has more details related to the configuration of specific logsource types

    https://www.ibm.com/docs/en/dsm

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Event Collector Certificate file/Private Key

    Posted Fri May 31, 2024 02:48 AM

    Thanks John, it is Nokia Airframe application. These files which i mentioned in need to extract from QRadar EC itself to upload on log source end. I didn't find listed under supported DSM



    ------------------------------
    Pavan Mishra
    ------------------------------

    Original Message