IBM SmartCloud Orchestrator log source parameters
If QRadar does not automatically detect the log source, add a IBM SmartCloud Orchestrator log source on the QRadar Console by using the IBM SmartCloud Orchestrator REST API protocol.
When using the IBM SmartCloud Orchestrator REST API protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect IBM
SmartCloud Orchestrator events:
| Parameter | Value |
|---|---|
| Log Source type | IBM SmartCloud Orchestrator |
| Protocol Configuration | IBM SmartCloud Orchestrator REST API |
| IP or Hostname | The IP address or server name of the SmartCloud Orchestrator. |
| Username | The user name of the SmartCloud Orchestrator console user. |
| Password | The password of the SmartCloud Orchestrator console user. |
| Confirm Password | This option confirms that the password was entered correctly. |
| EPS Throttle |
The maximum number of events per second that QRadar ingests. If your data source exceeds the EPS throttle, data collection is delayed. Data is still collected and then it is ingested when the data source stops exceeding the EPS throttle. The default is 5000. |
| Recurrence | How often this log source attempts to obtain data. Can be in Minutes, Hours, Days (default 5 minutes). |