Integrating Qradar with Secret Server Dashboard

The Secret Server Dashboard assists with creating a holistic security view for better detection and prioritization of the potential threats within an organization. IT administrators and security professionals can view and monitor Secret access, health, administrator activity, and password expiration status events directly from within QRadar.

To integrate Secret Server with QRadar:

1. Follow the configuration instructions outlined in the Configure Secret Server Settings.

2. Ensure the QRadar machine IP can access the Secret Server instance or that they share the same network.

3. Set up an on-premises instance if your Secret Server instance is cloud-based.

To create a Custom Parser in QRadar, see Exporting Logs from Secret Server.