IBM DLC Metrics

The IBM QRadar DSM for IBM® Disconnected Log Collector Metrics collects Syslog metric events from an IBM Disconnected Log Collector Metrics device.

To integrate IBM Disconnected Log Collector Metrics with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • DSM Common RPM
    • IBM DLC Metrics DSM RPM
  2. Configure your IBM Disconnected Log Collector Metrics device to send events to QRadar. For more information, see the IBM Disconnected Log Collector documentation (https://www.ibm.com/support/knowledgecenter/SS42VS_SHR/com.ibm.dlc.doc/c_dlc_overview.html).
  3. If QRadar does not automatically detect the log source, add an IBM Disconnected Log Collector Metrics log source on the QRadar Console.