SolarWinds Orion

The IBM® QRadar® DSM for SolarWinds Orion collects events from a SolarWinds Orion appliance.

The following table describes the specifications for the SolarWinds Orion DSM:
Table 1. SolarWinds Orion DSM specifications
Specification Value
Manufacturer SolarWinds
DSM name SolarWinds Orion
RPM file name DSM-SolarWindsOrion-QRadar_version-build_number.noarch.rpm
Supported versions 2013.2.0
Protocol SNMPv2


Event format name-value pair (NVP)
Recorded event types

All events

Automatically discovered? No
Includes identity? No
Includes custom properties? No
More information For more information, see the SolarWinds Orion link to public site website (
To integrate SolarWinds Orion with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM support website ( Download and install the most recent version of the SolarWinds Orion DSM RPM on your QRadar Console:
  2. Configure your SolarWinds Orion device to send events to QRadar.
  3. Add a SolarWinds Orion log source on the QRadar Console.
  4. Verify that QRadar is configured correctly.
    The following table shows a normalized sample event message from SolarWinds Orion:
    Table 2. SolarWinds Orion sample message
    Event name Low level category Sample log message
    Domain controller UnManaged Warning - EMAIL ONLY - Domain Controller UnManaged - hostname - Status = Unknown -EMAIL ONLY - Domain Controller UnManaged hostname is Unknown.