IBM QRadar

 View Only

  • 1.  Tableau send logs to QRadar

    Posted Wed September 21, 2022 05:35 AM

    Is there any documentation on receiving alert logs from tableau to QRadar?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Tableau send logs to QRadar

    Posted Thu September 22, 2022 04:24 AM

    Hi,

    This is one of the older comment I see from Tableau community.

    https://community.tableau.com/s/question/0D54T00000C5SMQSA3/tableau-server-log-monitoring-with-qradar-or-syslog

    However, it seems IBM QRadar doesn't have a supported DSM for Tableau yet. All the supported log source devices / DSMs are listed here. https://www.ibm.com/docs/en/dsm?topic=configuration-qradar-supported-dsms

    In this case, what you can do is that you can send the logs from Tableau to QRadar but the protocol what is supported or how to send logs from Tableau to QRadar, you might want to get some help from Tableau on that.

    Once you get the logs into QRadar, then you can create a custom log source to parse your Tableau events.

    How to create custom log source?

    https://www.ibm.com/docs/en/qsip/7.5?topic=qradar-custom-log-source-types

    Hope it helps.



    #QRadar
    #Support
    #SupportMigration