Re: setting up my IBM i to push syslog entries to an external SIEM server. -- MIDRANGE-L

Subject: Re: setting up my IBM i to push syslog entries to an external SIEM server.
From: Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 26 Jan 2022 15:35:54 -0700
List-archive: <https://archive.midrange.com/midrange-l/>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

https://www.ibm.com/support/pages/syslog-syslogd-pase-ibm-i specifically
addresses SIEM.

From: "Gerald Magnuson" <gmagqcy.midrange@xxxxxxxxx>

To: "midrange-l@xxxxxxxxxxxxxxxxxx" <midrange-l@xxxxxxxxxxxxxxxxxx>
Date: 27/01/2022 08:04 AM
Subject: setting up my IBM i to push syslog entries to an external
SIEM server.
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>

I have been tasked to "push" events and notifications on to our new SIEM
software.

I have a high level of auditing already turned on, and have extracted
audit
journal data via SQL in the past.

I don't really want to buy anymore software if I don't have to. Does the
IBM i have all the components to push QSYSOPR, and audit entries on to a
SIEM?

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

RE: setting up my IBM i to push syslog entries to an external SIEM server. , Roger Harman

This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.