H3C Comware Platform
The IBM QRadar DSM for the H3C Comware Platform collects events from a number of network devices from H3C Technologies. QRadar supports H3C Switches, H3C Routers, H3C Wireless LAN Devices, and H3C IP Security Devices.
The following table describes the specifications for the H3C Comware Platform DSM:
| Specification | Value |
|---|---|
| Manufacturer | H3C Technologies Co., Limited |
| DSM name | H3C Comware Platform, H3C Switches, H3C Routers, H3C Wireless LAN Devices, and H3C IP Security Devices. |
| RPM file name | DSM-H3CComware-QRadar_version-build_number.noarch.rpm |
| Supported versions | V7 |
| Protocol | Syslog |
| Event format | NVP |
| Recorded event types | System |
| Automatically discovered? | No |
| Includes identity? | No |
| Includes custom properties? | No |
| More information | H3C Technologies (http://www.h3c.com) |
To integrate H3C Comware Platform, H3C Switches, H3C Routers, H3C Wireless LAN Devices, or H3C IP
Security Devices with QRadar,
complete the following steps:
- If automatic updates are not enabled, download and install the most recent version of the H3C Comware Platform DSM RPM from the IBM® Support Website onto your QRadar® Console.
- Configure your H3C Comware Platform router or device to send syslog events to QRadar.
- If QRadar does not
automatically detect the log source, add a H3C Comware Platform log source on the QRadar Console. The following
table describes the parameters that require specific values for H3C Comware Platform event
collection:
Table 2. H3C Comware Platform log source parameters Parameter Value Log Source type H3C Comware Platform Protocol Configuration Syslog
The following table provides a sample syslog event message for the H3C Comware Platform DSM:
| Event name | Low level category | Sample log message |
|---|---|---|
| A user's AAA request is rejected | AAA Session Denied |
|