Is there any ability to send laserfiche audit logs to IBM QRadar ?
Regards,
Moayed
Is there any ability to send laserfiche audit logs to IBM QRadar ?
Regards,
Moayed
I need this answered too.
Brian's answer stands. In Laserfiche 10, it would be possible to use QRadar's SQL connector to try loading certain data from the Audit Trail Reporting database. You'd have to provide all the necessary information for QRadar to interpret what the various audit event classes and codes means.
In Laserfiche 11, Audit Trail is switching to using the Laserfiche Full-Text Search (LFFTS) engine as its report data source, so the SQL query path will no longer be available.
You can use QRadar's Windows Event Log forwarder to ingest Laserfiche event logs, though those are admin/diagnostic logs, not audit logs.
We don't offer an integration, and I'm not aware of anyone having written one.