JDBC log source parameters for Microsoft SQL Server
Add a Microsoft SQL Server data source in the QRadar® product by using the JDBC connector.
When using the JDBC connector, there are specific parameters that you must use.
| Parameter | Value |
|---|---|
| Data source type | Microsoft SQL Server |
| Connector type | JDBC |
| Data source identifier |
Type a name for the data source. The name can't contain spaces and must be unique among all data sources of the data source type that is configured to use the JDBC connector. If the data source collects events from a single appliance that has a static IP address or host name, use the IP address or host name of the appliance as all or part of the Data source identifier value; for example, 192.168.1.1 or JDBC192.168.1.1. If the data source doesn't collect events from a single appliance that has a static IP address or host name, you can use any unique name for the Data source identifier value; for example, JDBC1, JDBC2. |
| Database Type | From the list, select MSDE. |
| Database Name | Type Master as the name of the Microsoft SQL database. |
| IP or Hostname | Type the IP address or host name of the Microsoft SQL server. |
| Port |
Type the port number that is used by the database server. The default port for MSDE is 1433. The JDBC configuration port must match the listener port of the Microsoft SQL database. The Microsoft SQL database must have incoming TCP connections that are enabled to communicate with the QRadar product. Important: If you define a Database Instance when you are using
MSDE as the Database Type, you must leave the Port
parameter blank in your configuration.
|
| Table Name | Type dbo.AuditData as the name of the table or view that includes the audit event records. |
| Compare Field | Type event_time in the Compare Field parameter. The Compare Field identifies new events that are added between queries, in the table. |
For a complete list of JDBC connector parameters and their values, see JDBC connector configuration options.