IBM Red Hat OpenShift

The IBM QRadar DSM for Red Hat® OpenShift® collects auditing and infrastructure events from a Red Hat OpenShift cluster.

To integrate Red Hat OpenShift with QRadar, complete the following steps:
  1. If automatic updates are not enabled, download the most recent versions of the RPMs from the IBM® support website (https://www.ibm.com/support).
    • DSM Common RPM
    • Kubernetes Auditing DSM RPM
    • IBM Red Hat OpenShift DSM RPM
  2. Configure Red Hat OpenShift to forward events to QRadar. See Configuring Red Hat OpenShift to communicate with QRadar.
  3. If QRadar does not automatically detect the log source, add a log source on the QRadar Console. See IBM Red Hat OpenShift Syslog log source parameters.

    For more information about adding a log source, see Adding a log source.