You are viewing limited content. For full access, please sign in.

Question

Question

IBM QRadar

asked on April 17, 2019

Is there any ability to send laserfiche audit logs to IBM QRadar ?

 

Regards, 

Moayed 

0 0

Replies

replied on November 18, 2020

I need this answered too.

0 0
replied on November 19, 2020

Brian's answer stands. In Laserfiche 10, it would be possible to use QRadar's SQL connector to try loading certain data from the Audit Trail Reporting database. You'd have to provide all the necessary information for QRadar to interpret what the various audit event classes and codes means.

In Laserfiche 11, Audit Trail is switching to using the Laserfiche Full-Text Search (LFFTS) engine as its report data source, so the SQL query path will no longer be available.

You can use QRadar's Windows Event Log forwarder to ingest Laserfiche event logs, though those are admin/diagnostic logs, not audit logs.

0 0
replied on November 19, 2020

We don't offer an integration, and I'm not aware of anyone having written one.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.