Prerequisites

Before configuring the integration between Delinea Secret Server and IBM QRadar, ensure your environment meets the following version, access, and network requirements. These prerequisites are necessary for successful communication and log ingestion between the systems.

IBM QRadar

  • QRadar version 7.3.3 or higher is required.

  • The Pulse App must be installed in QRadar.

  • You must have admin-level access to QRadar to configure log source extensions and log sources.

Delinea Secret Server (On-Prem)

  • Secret Server must be deployed on-premises with logging capabilities enabled (Syslog or CEF).

  • You must have admin-level access to Secret Server to modify system settings and enable log forwarding.

Delinea Secret Server Cloud (SSC)

  • Distributed Engine must be installed and registered with Secret Server Cloud.

    Secret Server Cloud cannot directly send syslog or CEF logs to QRadar.

  • Admin access is required to configure logging and outbound forwarding settings.

  • Network Requirements (Distributed Engine)

    • Secret Server Cloud multi-tenant front-end: TCP 443

    • Azure Service Bus: TCP 9354