Configuring IBM WebSphere

You can configure IBM® WebSphere® Application Server events for IBM QRadar®.


  1. Using a web browser, log in to the IBM WebSphere administrative console.
  2. Click Environment > WebSphere Variables.
  3. Define Cell as the Scope level for the variable.
  4. Click New.
  5. Configure the following values:
    • Name - Type a name for the cell variable.
    • Description - Type a description for the variable (optional).
    • Value - Type a directory path for the log files.

    For example:

    {QRADAR_LOG_ROOT} = /opt/IBM/WebSphere/AppServer/profiles/Custom01/logs/QRadar

    You must create the target directory that is specified in Configuring IBM WebSphere before proceeding.

  6. Click OK.
  7. Click Save.
  8. You must restart the WebSphere Application Server to save the configuration changes.
    Note: If the variable you created affects a cell, you must restart all WebSphere Application Servers in the cell before you continue.

What to do next

You are now ready to customize the logging option for the IBM WebSphere Application Server DSM.