Linux DHCP Server

The Linux® DHCP Server DSM for IBM QRadar collects DHCP events by using syslog.

To integrate Linux DHCP Server with IBM QRadar, complete the following steps:
  1. If automatic updates are not enabled, download the most recent versions of the RPMs from the IBM® support website (http://www.ibm.com/support).
    • DSM Common RPM
    • GNU Linux DHCP DSM RPM
    • Protocol Common RPM
  2. Configure your Linux DHCP server to send syslog events to QRadar.
  3. If QRadar does not automatically detect the log source, add a Linux DHCP Server logsource log source on the QRadar Console. For more information about configuring your Linux DHCP Server, consult the Linux man pages or associated documentation for your DHCP daemon.