IBM QRadar

Hi team,

We want to send Jenkins logs into Qradar. Has anyone experienced this issue before?

Thanks in advance

There is this syslog plugin https://plugins.jenkins.io/syslog-logger/ It is old but still seems to work. QRadar probably will not detect the logsource and events out of the box so you should configure the dsm and event properties yourself

Hi team,

We want to send Jenkins logs into Qradar. Has anyone experienced this issue before?

Thanks in advance

Hi,

In fact, there is a nested structure here and the .log files in these directories are desired to be retrieved. I guess syslog does not exactly correspond to this.

There is this syslog plugin https://plugins.jenkins.io/syslog-logger/ It is old but still seems to work. QRadar probably will not detect the logsource and events out of the box so you should configure the dsm and event properties yourself

Hi team,

We want to send Jenkins logs into Qradar. Has anyone experienced this issue before?

Thanks in advance

Hi Adem, Sorry for the slow respone!  If you are able to connect to the Jenkins server with ssh/scp you could use the universal DSM log source type and the log file protocol to retrieve the files

Hi,

In fact, there is a nested structure here and the .log files in these directories are desired to be retrieved. I guess syslog does not exactly correspond to this.

There is this syslog plugin https://plugins.jenkins.io/syslog-logger/ It is old but still seems to work. QRadar probably will not detect the logsource and events out of the box so you should configure the dsm and event properties yourself

Hi team,

We want to send Jenkins logs into Qradar. Has anyone experienced this issue before?

Thanks in advance