Business Objects 4.2 and SIEM IBM QRadar

[Former Member]

Hi everybody of the community,

As part of a migration project of the Business Objects platform I will have a question about auditing and more specifically about Security Monitoring in Business Objects 4.2.

Would you know if SAP or another vendor / partner offers a Device Support Module (DSM) for IBM's SIEM QRadar for Business Objects 4.2?

This DSM would filter / parser / integrate the security logs, which are stored in the BO audit database, in IBM QRadar.

The interfacing of this DSM would send, via sFTP or SYSLOG message in IBM QRadar, BO security logs of type:

• Logon successful

• Login failed

• Created user

• Delete user • etc ....

Many thanks for your reply,

alex

[ivan-ae]

There are 3rd party tools around which provide integration support to IBM QRadar or other SIEMs. Do check my profile for futher details.
Best Regards, Ivan

[denis_konovalov]

Bo audit database doesn't store any security logs and SAP does not have this module support.
BO audit DB stores events as DB entries and those can be accessed via standard reporting tools.