List of Contributions

Davit Ubilava

Delta Consulting LLC

Contact Details

Delta Consulting LLC

My Content

1 to 20 of 20 total

Regex Data Format

Posted By Davit Ubilava Fri January 31, 2020 01:27 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello community, An actual raw log example is: Jan 30 15:27:47 mx2 bmserver: 1580383667|50538744-5afff7000000136c-c7-5e32bdb3d3ce|VERDICT| |connection_class_1|default|static connection class 1 I need correct Date Format to parse Log Source Time thank you ------------------------------ ...

Log Source Time Format

Posted By Davit Ubilava Fri December 13, 2019 07:19 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello, Can you tell me please, what string would be Date format? Thank you ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

Log Source Time Format

Posted By Davit Ubilava Fri December 13, 2019 07:18 AM
Found In Library: IBM Security QRadar

RE: Need Rule which detects if someone connects to my VPN successfully outside of my country. My country is the Republic of Georgia, shortly Georgia.

Posted By Davit Ubilava Tue October 29, 2019 07:39 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello, Is it right? ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

Need Rule which detects if someone connects to my VPN successfully outside of my country. My country is the Republic of Georgia, shortly Georgia.

Posted By Davit Ubilava Mon October 28, 2019 04:01 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello Community, I need Rule which detects if someone connects to my VPN successfully outside of my country. My country is the Republic of Georgia, shortly Georgia. thank you ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC Tbilisi,Georgia -- ...

RE: DSM Editor, regex

Posted By Davit Ubilava Mon October 14, 2019 02:27 AM
Found In Egroup: IBM Security QRadar \ view thread
JavaScript ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

RE: Sophos XG / Cyberoam DSM

Posted By Davit Ubilava Fri October 11, 2019 10:13 AM
Found In Library: IBM Security QRadar

RE: Sophos XG / Cyberoam DSM

Posted By Davit Ubilava Fri October 11, 2019 10:13 AM
Found In Egroup: IBM Security QRadar \ view thread
Please see my Extension ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

RE: Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Fri October 11, 2019 09:55 AM
Found In Egroup: IBM Security QRadar \ view thread
Is it QRadar 7.3.2 Patch 4 bug? Regex is showing in the preview but cannot click ok button ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

RE: Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Fri October 11, 2019 02:29 AM
Found In Egroup: IBM Security QRadar \ view thread
It worked partially. Thank you for help ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

RE: Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Thu October 10, 2019 02:22 AM
Found In Library: IBM Security QRadar

RE: Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Thu October 10, 2019 02:22 AM
Found In Egroup: IBM Security QRadar \ view thread
it says "Illegal escape sequence in regec" :( ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

RE: Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Thu October 10, 2019 02:13 AM
Found In Egroup: IBM Security QRadar \ view thread
Thank you very much ------------------------------ Davit Ubilava System Administrator Delta Consulting LLC TbilisiGeorgia ------------------------------

Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Fri October 04, 2019 10:03 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello, I have a Symantec Message Gateway log parsing problem and I choose to manually parse. Symantec Message Gateway DSM is not supported by QRadara Log example: Oct 4 15:42:03 mx2 bmserver[2537]: 1570189323|50538744-c7fff70000000aff-82-5d97300b77b1|VERDICT|test@test.com|none|default|default ...

Symantec Message Gateway log parsing problem

Posted By Davit Ubilava Fri October 04, 2019 10:02 AM
Found In Library: IBM Security QRadar

RE: Sophos XG / Cyberoam DSM

Posted By Davit Ubilava Fri September 27, 2019 02:50 AM
Found In Library: IBM Security QRadar

RE: Sophos XG / Cyberoam DSM

Posted By Davit Ubilava Fri September 27, 2019 02:50 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello. I parsed it yesterday.I can give you regex codes and custom fields,than you just map event name to event category,if you don't i can help you to do that.please see excel file. ------------------------------ Davit Ubilava ------------------------------

SQL Table Custom fields parsing problem

Posted By Davit Ubilava Fri September 27, 2019 02:42 AM
Found In Library: IBM Security QRadar

SQL Table Custom fields parsing problem

Posted By Davit Ubilava Fri September 27, 2019 02:42 AM
Found In Egroup: IBM Security QRadar \ view thread
Hello I am testing QRadar with my customer .My customer logs SQL audit logs into SQL table,this table has custom fields QRadar cannot parse these custom fields.I can manually edit SQL DSM editor and create custom fields in DSM but if my customer in the future will add other fields in ...

RE: My favorite thing about #MasterSkills University Munich is...

Posted By Davit Ubilava Wed September 11, 2019 10:06 AM
Found In Egroup: Global Security Forum \ view thread
MSU2019 Munich is just awesame.Good luck to everyone! ------------------------------ Davit Ubilava ------------------------------