IBM Support

IBM Security Guardium: Additional parameter to LEEF Message Template for Object Name

Question & Answer


Question

Is it possible to add an additional parameter for object name to the LEEF Message Template so IBM Security Guardium (Guardium) sends the Object Name in alerts to the remote facility via syslog forwarding?

Cause

You want to use syslog forwarding to send alerts to a remote facility using LEEF format. You want to include the Object Name in the message however, the default Message Template does not include a parameter/variable to send object name.

Answer

No. At the time of publishing or last review date of this technote, it is not possible to add Object Name to the Message Template. It is not possible to send the Object Name in alerts to the remote facility via syslog forwarding.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Appliances","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2;10.1.3;9.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22007049

Page Feedback