Categories
Log Activity Video

DSM Editor (part two)

This is the second part of the article about DSM Editor. Please find the link here to the first part of this article. As mentioned there, DSM Editor can create a new Log Source, based on repeating information in any kind of log. Sample Log Suppose, that you are dealing with logs collected from the […]

Categories
Architecture Log Activity

QRadar Log Sources

QRadar Log Sources are displayed in Log Activity tab where each event information is in a form of record from that log source. An event is a record from a device that describes an action on a network or host. SIEM normalizes the varied information found in raw events. QRadar SIEM supports many protocols, to receive raw […]