IBM DataPower
The IBM QRadar DSM collects event logs from your IBM® DataPower® system.
IBM DataPower is formerly known as IBM WebSphere® DataPower.
The following table identifies the specifications for the IBM DataPower DSM.
| Specification | Value |
|---|---|
| Manufacturer | IBM |
| DSM Name | DataPower |
| RPM file name | DSM-IBMDataPower-QRadar_version-build_number.noarch.rpm |
| Supported versions | FirmwareV6 and V7 |
| Protocol | Syslog |
| QRadar recorded event types | All Events |
| Log source type in QRadar UI | IBM DataPower |
| Auto discovered? | Yes |
| Includes identity? | No |
| Includes custom properties? | No |
| For more information | IBM web page (http://www.ibm.com/) |
To send events from IBM DataPower to QRadar, complete the following steps:
- If automatic updates are not enabled, download and install the most recent version of the IBM DataPower DSM from the IBM Support Website onto your QRadar Console.
- For each instance of IBM DataPower, configure the IBM DataPower system to communicate with QRadar.
- If QRadar does not automatically discover IBM DataPower, create a log source for each instance of IBM DataPower on the QRadar
Console. Use the following IBM DataPower specific values:
Parameter Value Log Source Type IBM DataPower Protocol Configuration Syslog