Configuring IBM IDaaS Platform to communicate with QRadar

You can enable IBM IDaaS Platform audit events to be generated in LEEF format on your IBM® IDaaS console.

Before you begin

Ensure that IBM IDaaS Platform is installed and configured on your WAS console.

Procedure

  1. Access the IDaas Platform configuration file on your WAS console. <WAS_home>/profiles/<profile_name>/config/idaas/platform.cofig.properties
  2. If the platform.config.properties file does not contain a set of audit properties, configure the following options:
    Property Description
    audit.enabled=true Audit property is enabled.

    audit.syslog.message.format=leef

    audit.syslog.server=<IP_address>

    		 Valid type is LEEF.

    audit.syslog.transport=TRANSPORT_UDP

    audit.syslog.server.port=514

    		 Transport values are TRANSPORT_UDP and TRANSPORT_TLS.
  3. Restart the IBM IDaaS Platform application on your WAS console.