IBM Fiberlink REST API log source parameters for IBM MaaS360 Security

If QRadar does not automatically detect the log source, add a IBM® MaaS360® Security log source on the QRadar Console by using the IBM Fiberlink® REST API protocol.

When using the IBM Fiberlink REST API protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect IBM Fiberlink REST API events from IBM MaaS360 Security:

Table 1. IBM Fiberlink REST API log source parameters for the IBM MaaS360 Security DSM
Parameter	Value
Log Source type	IBM MaaS360 Security
Protocol Configuration	IBM Fiberlink REST API
Log Source Identifier	Type a unique identifier for the log source. The Log Source Identifier can be set to any valid value and does not need to reference a specific server. You can set the Log Source Identifier to the same value as the Log Source Name. If you have more than one IBM MaaS360 Security log source that is configured, you might want to identify the first log source as `MaaS3601`, the second log source as `MaaS3602`, and the third log source as `MaaS3603`.

For a complete list of IBM Fiberlink REST API protocol parameters and their values, see IBM Fiberlink REST API protocol configuration options.