Log integration with QRadar
You can integrate the audit log files of a Directory Server instance with the audit logs of the QRadar® server instance. QRadar log integration is required to correlate the activity on the IBM® Security Directory Suite in the perspective of larger IT systems and network.
IBM Security QRadar SIEM consolidates log source event data from thousands of devices, endpoints, and applications that are distributed throughout a network. It runs immediate normalization and correlation operations on raw data to distinguish real threats from false positives.