Configuring Fasoo Enterprise DRM to communicate with QRadar

For IBM QRadar to collect log event data, you must create a database view.

Before you begin

The script in this procedure is only intended for MS SQL Servers. For other database types, modifications to the script will be required for the target database type.

1. Log in to SQL Server Management Studio.
2. Create a custom view in your Fasoo database.

   USE fed5;
   GO
   CREATE VIEW view_fut_log
   AS
   SELECT
   dbo.fut_log.log_id,
   dbo.fut_log.log_date,
   dbo.fut_log.log_type,
   dbo.fut_log.product,
   dbo.fut_log.purpose,
   dbo.fut_log.usage_result,
   dbo.fut_log.license_status,
   dbo.fut_log.ip,
   dbo.fut_user.user_code,
   dbo.fut_user.user_name,
   dbo.fut_user.user_dept_code,
   dbo.fut_user.user_dept_name,
   dbo.fut_log.position_code,
   dbo.fut_log.position_name,
   dbo.fut_content.content_code,
   dbo.fut_content.current_content_name,
   dbo.fut_content.content_name,
   dbo.fut_content.sec_level_code,
   dbo.fut_content.sec_level_name,
   dbo.fut_content.system_code,
   dbo.fut_content.system_name,
   dbo.fut_log.owner_code,
   dbo.fut_log.owner_name,
   dbo.fut_log.owner_dept_code,
   dbo.fut_log.owner_dept_name,
   dbo.fut_content.content_create_date,
   dbo.fut_log.entry_date
   FROM dbo.fut_log
   INNER JOIN dbo.fut_user
   ON dbo.fut_log.user_id = 
   dbo.fut_user.user_id
   INNER JOIN dbo.fut_content
   ON dbo.fut_log.content_id = 
   dbo.fut_content.content_id
   GO