Secret Server Events in the Secret Server Application in QRadar

  1. Log in to QRadar using the Admin user.

  2. Download the Pulse App from https://exchange.xforce.ibmcloud.com/ and install the Pulse extension by going to Admin > Extension Management in QRadar console (Required configuration for Secret Server dashboard in Pulse).

  3. Download the Delinea Secret Server Dashboard extension from https://exchange.xforce.ibmcloud.com/hub/extension/445961bc985a3610d8b3e83a56b64af3

  4. SelectAdd.

  5. Browse the Delinea Secret Server Dashboard extension downloaded from IBM Exchange.

  6. Select Add .

Create the Log Source

  1. Go to Admin > Log source.

  2. Select Add .The Add log source pop-up window opens.

  3. Enter the following information:

    • Name
    • Description
    • Select the log source type created in above steps.
    • Enter the Log source Identifier as the Host Name of machine where the Secret Server is installed.

  4. Select Save.

Deploy Log Source

On the Admin Page of QRadar, go to deploy changes.