Develop a DSM
QRadar can collect events from security products by using a plugin file that is called a Device Support Module (DSM). You can create a DSM using the DSM Editor.
Tool: DSM Editor
The DSM Editor provides an easy way to create a custom parser for getting events into QRadar.
Access the DSM Editor from your IBM QRadar console. You can open the DSM Editor from the Log activity tab, or if you are an administrator, you can open it from the Admin tab.