Add QRadar to EPM

1. Select Configuration, and then select SIEM Settings.
2. Select Enable SIEM Integration to turn on the feature.
3. From the Integration Type list, select QRADAR.
4. Enter the details for your QRadar configuration:
   • Hostname. Do not include https:// in the hostname.
   • Port
   • Cert: This is the client certificate required when sending events to a syslog server using mutual TLS (mTLS) authentication.
   • Key: This is the mTLS client certificate private key. The private key must be generated as PKCS #8.
5. Select the data format: CIM - Common Information Model or ECS - Elastic Common Schema.
6. Click Validate Settings.
7. Click Save Changes to confirm and save.

We recommend using our integration app to integrate EPM and QRadar.

For more information, see Integrate BeyondTrust EPM + IBM QRadar.