IBM Security Privileged Identity Manager 샘플 이벤트 메시지

QRadar와의 성공적인 통합을 확인하는 방법으로 이 샘플 이벤트 메시지를 사용하십시오.

다음 표에서는 IBM® Security Privileged Identity Manager DSM에 대해 JDBC 프로토콜을 사용할 때 샘플 이벤트 메시지를 제공합니다.

이벤트 이름 하위 레벨 카테고리 샘플 로그 메시지

CredentialLease 관리 GetPassword 성공

정보

표 1. IBM Security Privileged Identity DSM에서 지원하는 IBM Security Privileged Identity Manager 샘플 메시지입니다.
이벤트 이름	하위 레벨 카테고리	샘플 로그 메시지
CredentialLease 관리 GetPassword 성공	정보	ID: "4988747757478318080" EVENT_CATEGORY: "CredentialLeaseManagement" ENTITY_NAME: "suser1" RESOURCE_NAME: "PIM 202 Data Tier" ENTITY_DN: "erglobalid=8684147307608490000,ou=credentials,ou=credCatalog,erglobalid=00000000000000000000,ou=ibm,dc=com" ENTITY_TYPE: "Credential" ACTION: "GetPassword" INITIATOR_NAME: "user" INITIATOR_DN: "eruid=user,ou=systemUser,ou=itim,ou=ibm,dc=com" CONTAINER_NAME: "USWest" CONTAINER_DN: "erglobalid=3874502227230100000,ou=orgChart,erglobalid=00000000000000000000,ou=ibm,dc=com" RESULT_SUMMARY: "SUCCESS" TIMESTAMP: "2018-10-05 17:17:05:320 GMT" POOL_NAME: "" LEASE_DN: "" LEASE_EXPIRATION_TIME: "" JUSTIFICATION: "" COMMENTS: "null" TIMESTAMP2: "null" IDP_NAME: "" SESSION_ID: "" TARGET: "" CLIENT_IP: "" RECORDING_ID: "" CRED_TYPE: "PASSWORD"

ID: "4988747757478318080" EVENT_CATEGORY: "CredentialLeaseManagement" ENTITY_NAME: "suser1" RESOURCE_NAME: "PIM 202 Data Tier" ENTITY_DN: "erglobalid=8684147307608490000,ou=credentials,ou=credCatalog,erglobalid=00000000000000000000,ou=ibm,dc=com" ENTITY_TYPE: "Credential" ACTION: "GetPassword" INITIATOR_NAME: "user" INITIATOR_DN: "eruid=user,ou=systemUser,ou=itim,ou=ibm,dc=com" CONTAINER_NAME: "USWest" CONTAINER_DN: "erglobalid=3874502227230100000,ou=orgChart,erglobalid=00000000000000000000,ou=ibm,dc=com" RESULT_SUMMARY: "SUCCESS" TIMESTAMP: "2018-10-05 17:17:05:320 GMT" POOL_NAME: "" LEASE_DN: "" LEASE_EXPIRATION_TIME: "" JUSTIFICATION: "" COMMENTS: "null" TIMESTAMP2: "null" IDP_NAME: "" SESSION_ID: "" TARGET: "" CLIENT_IP: "" RECORDING_ID: "" CRED_TYPE: "PASSWORD"