ARCON-PAM

IBM QRadar DSM for ARCON-PAM parses events that are issued by ARCON-PAM application.

.

To integrate ARCON-PAM with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM® support website. Download and install the most recent version of the following RPMs on your QRadar® Console.
    • ARCON-PAM DSM RPM
  2. Configure ARCON-PAM application server to send events QRadar.
  3. If QRadar does not automatically detect the log source, add a ARCON-PAM log source on the QRadar Console. For more information, see: Syslog log source parameters for ARCON-PAM.