Red Hat Advanced Cluster Security for Kubernetes

The IBM QRadar DSM for Red Hat® Advanced Cluster Security for Kubernetes collects HTTP Receiver events from a Red Hat Advanced Cluster Security for Kubernetes application.

To integrate Red Hat Advanced Cluster Security for Kubernetes with QRadar, complete the following steps:
  1. If automatic updates are not enabled, download the most recent versions of the RPMs from the IBM® support website (https://www.ibm.com/support).
    • DSM Common RPM
    • Red Hat Advanced Cluster Security for Kubernetes DSM RPM
  2. Configure your Red Hat Advanced Cluster Security for Kubernetes application to send events to QRadar. For more information, see Configuring Red Hat Advanced Cluster Security for Kubernetes to communicate with QRadar.
  3. If QRadar does not automatically detect the log source, add a Red Hat Advanced Cluster Security for Kubernetes log source on the QRadar Console.