HyTrust CloudControl
The IBM QRadar DSM for HyTrust CloudControl collects events from HyTrust CloudControl devices.
The following table lists the specifications for the HyTrust CloudControl DSM:
Specification | Value |
---|---|
Manufacturer | Hytrust |
DSM name | HyTrust CloudControl |
RPM file name | DSM-HyTrustCloudControl-Qradar_version-build_number.noarch.rpm |
Supported versions | V3.0.2 through V3.6.0 |
Protocol | Syslog |
Recorded event types | All events |
Automatically discovered? | Yes |
Includes identity? | Yes |
Includes custom properties? | No |
More information | Hytrust web site (http://www.hytrust.com) |
To collect HyTrust CloudControl events, complete the following steps:
- If automatic updates are not enabled, download and install the most recent
version of the following RPMs from the IBM® Support Website onto your QRadar
Console:
- DSMCommon RPM
- HyTrust CloudControl DSM RPM
- Configure your HyTrust CloudControl device to send syslog events to QRadar.
- If QRadar
does not automatically detect the log source, add a HyTrust CloudControl log
source on the QRadar
Console. The following table describes the parameters that require specific
values that are required for HyTrust CloudControl event collection:
Table 2. HyTrust CloudControl log source parameters Parameter Value Log Source type HyTrust CloudControl Protocol Configuration Syslog