Adding a DSM
If your Device Support Module (DSM) is not automatically discovered, manually install a DSM.
Each type of log source has a corresponding DSM that parses and normalizes events from the log source.
- Download the DSM RPM file from the IBM® support website (http://www.ibm.com/support).
- Copy the RPM file to QRadar®.
- Using SSH, log in to the QRadar host as the root user.
- Go to the directory that includes the downloaded file.
Type the following command:
yum -y install <rpm_filename>Note: The rpm -Uvh <rpm_filename> command line to install was replaced with the yum -y install <rpm_filename> command.
- Log in to QRadar.
On the Admin tab, click Deploy Changes. Restriction: Uninstalling a Device Support Module (DSM) is not supported in QRadar.