IBM Security QRadar DSM Configuration Guide 85 SAFENET DATASECURE/KEYSECURE The SafeNet DataSecure DSM for IBM Security QRadar receives syslog events from your SafeNet DataSecure and KeySecure devices. QRadar supports SafeNet DataSecure and KeySecure v6.3.0 and later. Supported event types SafeNet DataSecure and KeySecure create the following event logs: Activity log Contains a record of each request that is received by the key server. Audit log Contains a record of all configuration changes and user input errors that are made to KeySecure, whether through the management console or the command line interface. Client event log Contains a record of all client requests that have the element. System log Contains a record of all system events, such as the following events: • Service starts, stops, and restarts • SNMP traps • Hardware failures • Successful or failed cluster replication and synchronization • Failed log transfers • License errors Configuration overview To integrate SafeNet DataSecure/KeyStore with QRadar, you must perform the following tasks: 1 Enable syslog on the SafeNet device. 2 Configure a SafeNet DataSecure/KeyStore log source on your QRadar Console.
