Is any documentation available for sending Ranger logs to IBM QRadar?

4 replies
2954 views
Translate All

I am looking for documentation, examples and other prior art for integrating Ranger logs with IBM QRadar. Our Security team uses QRadar for log filtering and monitoring and requires we send our audit logs to a QRadar event hub for audits.

vamsi_redd

Gold ⭐️

Hi We don't have any specific documentation, But the ranger audit logs will be stored in solr, If possible you can query the audits using solr and you can make an integration from solr to IBM QRadar

Translate

VidyaSargur

Community Manager

@wjsandman, Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.

Translate

Regards, Vidya Sargur, Community Manager Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.

wjsandmanAuthor

Gold ⭐️

Just saw this reply... not alot of direction, but better than nothing. I'll have a look and reply.

Translate

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.