The IBM® QRadar® DSM for BeyondTrust PowerBroker logs all events to a multi-line format in a single event log that is viewed by using Beyond Trust's pblog utility.
You must be on a Linux®, Unix or AIX® operating system to integrate BeyondTrust PowerBroker with QRadar.
- If automatic updates are not enabled, RPMs are available for download from the IBM support website (http://www.ibm.com/support). Download and install the most recent version of the BeyondTrust PowerBroker DSM RPM on your QRadar Console.
- Configure BeyondTrust PowerBroker to communicate with QRadar. See Configuring BeyondTrust PowerBroker to communicate with QRadar.
For more information about TLS syslog log source parameters, see TLS syslog protocol configuration options.