Infoblox NIOS

The IBM® QRadar® DSM for Infoblox NIOS collects Syslog events from an Infoblox NIOS device.

To integrate Infoblox NIOS with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • DSM Common RPM
    • Infoblox DSM RPM
  2. Configure your Infoblox device to send syslog events to QRadar. For more information about sending syslog events from Infoblox, see your Infoblox NIOS documentation (https://docs.infoblox.com/display/ILP/NIOS).
  3. Add an Infoblox log source on the QRadar Console. The following table describes the parameters that require specific values to collect Syslog events from Infoblox NIOS:
    Table 1. Infoblox NIOS Syslog log source parameters
    Parameter Value
    Log Source Name Type a unique name for the log source.
    Log Source Type (Optional) Type a description for the log source.
    Log Source type Infoblox NIOS
    Protocol Configuration Syslog