Creating a log source extensions document to get data into QRadar

Creating a log source extensions document to get data into QRadar https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/c_LogSourceGuide_ExtDocs_intro.html

Mon 15 Jul 2019 05:25:57 PM CEST

You create log source extensions (LSX) when log sources don't have a supported DSM, or to repair an event that has missing or incorrect information, or to parse an event when the associated DSM fails to produce a result.

Links per page

Display