Alibaba ActionTrail
The IBM® QRadar® DSM for Alibaba ActionTrail supports events that are collected from Alibaba Cloud Object Storage buckets with the help of Alibaba Cloud Object Storage protocol. It also supports Alibaba Cloud Simple Log Service Protocol.
The following table lists the specifications for the Alibaba ActionTrail DSM:
| Specification | Value |
|---|---|
| Manufacturer | Alibaba Cloud |
| DSM | Alibaba ActionTrail |
| RPM name | DSM-AlibabaActionTrail-<QRadar_version-Build_number>.noarch.rpm |
| Supported protocols |
Alibaba Cloud Object Storage Alibaba Cloud Simple Log Service Syslog |
| Event format | JSON |
| Automatically discovered? | Yes |
| Includes identity? | Yes |
| Includes custom properties? | No |
| More information | ActionTrail |