Configuring an Amazon CloudFront log source by using the Amazon Web Services protocol

If you want to collect Amazon CloudFront logs from Amazon Kinesis Data Streams, configure a log source on the IBM QRadar Console so that Amazon CloudFront can communicate with QRadar by using the Amazon Web Services protocol.

Procedure

  1. If automatic updates are not enabled, download and install the most recent version of the following RPMs from the IBM® Support Website onto your QRadar Console:
    • Protocol Common
    • Amazon Web Services Protocol RPM
    • DSMCommon RPM
    • Amazon CloudFront DSM RPM
  2. Configure an Amazon CloudFront log source. For more information, see Configuring an Amazon log source by using the Amazon Web Services protocol and Kinesis Data Streams.