IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  HP Aruba Switch Integration

    Posted Wed February 21, 2024 03:08 AM

    Hi,

    Can we integrate HP ARUBA SWITCH in QRadar.  I can't find the log source type for it.

    Thanks



    ------------------------------
    Arunkumar R
    ------------------------------


  • 2.  RE: HP Aruba Switch Integration

    Posted Wed February 21, 2024 06:11 AM

    Hi Arunkumar

    We currently have DSM's for the following Aruba products

    Aruba Networks    Aruba ClearPass Policy Manager v6.5.0.71095 to v6.11.1    
    Aruba Networks    Mobility Controllers v2.5 +

    You can create your own DSM using a Universal DSM and map the events through the DSM editor

    https://www.ibm.com/docs/en/dsm?topic=lse-creating-log-source-extensions-document-get-data-into-qradar

    There are also a series of videos created by Jose Bravo on this

    https://www.youtube.com/watch?v=MP6grxJvxn0&list=PLHh9jhztlMyprR7Kny4dGdP_l7JkpmBpq

    Please note that UDNS/Custom DSM's are out of the scope of support.  You can raise an IBM Idea to have this supported

    https://www.ibm.com/support/pages/qradar-requesting-new-features-ibm-ideas

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------

    Original Message


  • 3.  RE: HP Aruba Switch Integration

    Posted Sun February 25, 2024 11:33 PM

    Hi John,

    Thanks for the support, the youtube link helps me.

    Thanks



    ------------------------------
    Arunkumar R
    ------------------------------

    Original Message