IBM MaaS360 Security
The IBM® MaaS360® Security DSM for IBM QRadar® collects event logs from the MaaS360 Security console.
The following table identifies the specifications for the IBM MaaS360 Security DSM:
| Specification | Value |
|---|---|
| Manufacturer | IBM |
| DSM name | IBM MaaS360 Security |
| RPM file name | DSM-IBMFiberlinkMaaS360 |
| Supported versions | N/A |
| Event format | LEEF, JSON |
| QRadar recorded event types |
Compliance rule events Device enrollment events Action history events |
| Automatically discovered? | No |
| Included identity? | Yes |
| Includes custom properties? | No |
| More information | MaaS360 Security website (http://www.maas360.com/) |
To integrate IBM MaaS360 Security with QRadar, use the following steps:
- If automatic updates are not enabled, download the most recent versions of the RPMs from the
IBM support website (https://www.ibm.com/support).
- DSMCommon RPM
- IBM Fiberlink® REST API Protocol RPM
- IBM MaaS360 Security RPM
- Configure your MaaS360 Security instance to enable communication with QRadar.
- Add an IBM MaaS360 Security log source on the QRadar Console.