Integrations

The Integrations page displays the capabilities that you can integrate in Data Resiliency Service.

By using the integrations, administrators can add or remove various integration tools, such as QRadar SIEM and enable or disable email notifications. To add or remove tools, click Data Resiliency > Integrations on the IBM® Storage Defender® Data Resiliency Service home page.
Important: IBM Security QRadar® SIEM and Email notifications are not available with the trial plan. Contact sales if you wish to utilize these features.

Value-add of IBM Storage Defender integration

  • Empower security analysts to view storage related incidents on their existing Security Operation Center (SOC) dashboard.
  • Ensure that the incidents are more actively monitored as compared to the IBM Storage Defender UI.
The following IBM Storage Defender events are sent to QRadar:
  • Alerts for any threats received from IBM Storage Defender sensor.
  • Events such as missed heartbeat from IBM Storage Defender sensor.