HyTrust CloudControl
The IBM QRadar DSM for HyTrust CloudControl collects events from HyTrust CloudControl devices.
The following table lists the specifications for the HyTrust CloudControl DSM:
| Specification | Value |
|---|---|
| Manufacturer | Hytrust |
| DSM name | HyTrust CloudControl |
| RPM file name | DSM-HyTrustCloudControl-Qradar_version-build_number.noarch.rpm |
| Supported versions | V3.0.2 through V3.6.0 |
| Protocol | Syslog |
| Recorded event types | All events |
| Automatically discovered? | Yes |
| Includes identity? | Yes |
| Includes custom properties? | No |
| More information | Hytrust web site (http://www.hytrust.com) |
To collect HyTrust CloudControl events, complete the following steps:
- If automatic updates are not enabled, download and install the most recent
version of the following RPMs from the IBM® Support Website onto your QRadar
Console:
- DSMCommon RPM
- HyTrust CloudControl DSM RPM
- Configure your HyTrust CloudControl device to send syslog events to QRadar.
- If QRadar
does not automatically detect the log source, add a HyTrust CloudControl log
source on the QRadar
Console. The following table describes the parameters that require specific
values that are required for HyTrust CloudControl event collection:
Table 2. HyTrust CloudControl log source parameters Parameter Value Log Source type HyTrust CloudControl Protocol Configuration Syslog