Cisco Secure Workload

The IBM QRadarDSM for Cisco Secure Workload collects events from a Cisco Secure Workload platform.

To integrate Cisco Secure Workload with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM® support website (https://www.ibm.com/support). Download and install the Cisco Secure Workload DSM RPM on your QRadar Console.
  2. Configure your Cisco Secure Workload platform to send events to QRadar.
  3. If QRadar does not automatically detect the log source, add a Cisco Secure Workload log source on the QRadar Console. The following table describes the parameters that require specific values to collect events from the Cisco Secure Workload platform:
    Table 1. Cisco Secure Workload Syslog log source parameters
    Parameter Value
    Log Source type Cisco Secure Workload
    Protocol Configuration Syslog
    Log Source Identifier

    The IP address or hostname that identifies the log source. The identifier helps you determine which events came from your Cisco Secure Workload platform.