IBM Storage Protect

The IBM QRadar DSM for IBM Storage Protect parses messages and events that are issued by IBM Storage Protect components.

To integrate IBM Storage Protect with QRadar, complete the following steps:
  1. If automatic updates are not enabled, download and install the most recent version of the following RPM from the IBM Support Website onto your QRadar Console:
    • IBM Storage Protect DSM RPM
  2. Configure your IBM Storage Protect server to send events to QRadar. For more information, see Configure IBM Storage Protect.
  3. If QRadar does not automatically detect the log source, add an IBM Storage Protect log source on the QRadar Console. For more information, see Syslog log source parameters for IBM Storage Protect.