IBM Defender Data Protect

The IBM QRadar DSM for IBM® Defender Data Protect parses events that are issued by IBM Defender Data Protect components.

To integrate IBM Defender Data Protect with QRadar, complete the following steps:
  1. If automatic updates are not enabled, download the IBM DefenderDataProtect DSM RPM from the IBM support website (https://www.ibm.com/support).
  2. Configure your IBM Defender Data Protect system to send events to QRadar. For more information, see Configuring IBM Defender Data Protect to communicate with QRadar.
  3. If QRadar does not automatically detect the log source, add an IBM Defender Data Protect log source on the QRadar Console. For more information, see Syslog log source parameters for IBM Defender Data Protect DSM.