Restituisci
-
Titolo
Forwarding events to IBM QRadar -
Descrizione
Qradar expects logs to be in a specific format.
Out of the box, InTrust includes support for SecureWorks while QRadar will require customization of the forwarding parser.
-
Risoluzione
Forwarding parser for QRadar is included out-of-the-box in InTrust 11.0.5 and higher.
-
ID difetto
ST85447 -
Informazioni aggiuntive
The forwarding tab is located on the repository tab in the DEPLOYMENT MANAGER (not the InTrust Manager)