IBM Champions

IBM Champions Banner

IBM Champions

Engage with IBM Champions and top advocates

 View Only
  • 1.  Storage Defender SIEM Integrations

    Posted Tue December 10, 2024 10:11 AM
    Edited by Randy Frye Tue December 10, 2024 01:29 PM

    Defender product group has futures defined for integration of certain well-known SIEM products with Defender, in addition to currently-supported Splunk and IBM QRadar.  Support for additional SIEM products are supposed to be rolled out on an ongoing basis.  I though it might be helpful to have a thread where Champions can comment what SIEM products they use in their environments, to provide the Defender development teams a better idea of which SIEM product integrations to prioritize.



    ------------------------------
    Randy Frye
    Senior Storage Administrator
    D&H Distributing
    Harrisburg
    7173647948
    ------------------------------



  • 2.  RE: Storage Defender SIEM Integrations

    Posted Tue December 10, 2024 10:13 AM
    Edited by Randy Frye Tue December 10, 2024 10:25 AM

    I'll start:

    Rapid7 InsightIDR SIEM is what we use in our environment.

    A second forum for Defender development teams to see what SIEM integrations their customers want to see implemented is to submit it in the IBM IDEAS portal.
    Following is my IDEA submission for supporting Rapid7; if anyone else uses this SIEM, please vote on this IDEA:

    https://ibm-sys-storage.ideas.ibm.com/ideas/SCRDEF-I-74



    ------------------------------
    Randy Frye
    Senior Storage Administrator
    D&H Distributing
    Harrisburg
    7173647948
    ------------------------------