MongoDB
The IBM
QRadar DSM
for MongoDB parses events that are issued by MongoDB server.
To integrate MongoDB service with QRadar, complete the following steps:
- If automatic updates are not enabled, download the most recent versions of the RPMs from the
IBM® support website (http://www.ibm.com/support).
- MongoDB DSM RPM
- Configure MongoDB to send events to QRadar.
- If QRadar® does not automatically detect the log source, add a MongoDB log source on the QRadar Console. For more information about the protocol, see Syslog log source parameters for MongoDB DSM.