alerts forwarding to IBM Qradar SIEM are not parsing
I am forwaring F secure PM alerts and notifications to IBM Qradar SIEM over syslog but events which are recievied to IBM Qradar are unparsed. Kindly let me know whether we can resolve this from F secure side or Can I check with IBM support.
MJ-perComp Posts: 1,101 Superuser
do you see the syslog entries from PMS on the SIEM box?
if yes: the problem is inside SIEM, contact IBM.
else: what are your syslog settings in PMS?6 1Like
We also sending event from F-Secure to QRadar. Event aren't parsing so you need create own DSM for this events - if I good know, IBM don't have native DSM for F-Secure events.
This discussion has been closed.