DSM updates

IBM QRadar uses Device Support Modules (DSMs) to log and correlate the data that is collected from external log sources, such as firewalls, switches, or routers.

DSMs are regularly updated to ensure that QRadar can correctly interpret and parse security event information that is provided by external devices. DSMs can be updated both automatically and manually.

Although QRadar devices include native log sending capabilities, several devices require extra configuration, or an agent, or both, to send logs. Configuration varies between device types. You must ensure that the devices are configured to send logs in a supported format.

For a list of supported devices, see the DSM Configuration Guide.