SIEM Integration with IBM QRadar

Pre-requisites

To begin integrating Enpass with IBM QRadar, ensure you have Log Source Identifier for Enpass (IBM QRadar Documentation) and its following details:

• Host URL
• Log Source Identifier

Configure Enpass Admin Console to Send Event Logs to IBM QRadar

1. Log in to Enpass Admin Console
2. Go to Settings > Event Logs.
   
3. Go to Configure button under SIEM Integration Section.
   
4. Select IBM QRadar SIEM and Continue.
   
5. Enter Host URL and Log Source Identifier.
   
6. Now Click Verify & Save.

Related topics

• Getting started with Event Logs
• IBM QRadar Documentation – Adding a Log Source
• IBM QRadar Documentation – Protocol Configuration