Re: sending security logs to IBM QRadar

[Tim Bronski <tim.bronski@xxxxxxxxx>]

I'll declare an interest because I work for Arpeggio but I've worked 
with replacing AJLIB. The primary reasons being:
There's no real time monitoring,
You are limited in the events and information you can monitor,
It doesn't scale - performance is horrible,
It's FTP based,
It's old and unmaintained.

On 11/23/2015 6:06 PM, Jim Franz wrote:
> Has anyone implemented the AJLIB option (QRadar IBM AS/400 iSeries DSM)
> which will send to QRadar the audit journal records?
>
>
> On Mon, Nov 23, 2015 at 9:13 AM, <JWGrant@xxxxxxxxxxxxxxx> wrote:
>
> >     At the time we did the integration two years ago there was no native
> >     interface.
> >     That may have changed I would suggest asking IBM
> >     Sent from my iPad
> >     > On Nov 23, 2015, at 09:06, Jim Franz <franz9000@xxxxxxxxx> wrote:
> >     >
> >     > typo in question:
> >     > Is there a native interface or does this require a product?
> >     >
> >     >> On Mon, Nov 23, 2015 at 8:47 AM, Jim Franz <franz9000@xxxxxxxxx>
> > wrote:
> >     >>
> >     >> Is anyone sending security logs to a QRadar system?
> >     >> Is there a native interface of requires a product?
> >     >> Been googling, but looking for real use..
> >     >> offline if preferred.
> >     >>
> >     >> Jim Franz
> >     > --
> >     > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> >     list
> >     > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> >     > To subscribe, unsubscribe, or change list options,
> >     > visit: [1]http://lists.midrange.com/mailman/listinfo/midrange-l
> >     > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> >     > Before posting, please take a moment to review the archives
> >     > at [2]http://archive.midrange.com/midrange-l.
> >     >
> >
> > References
> >
> >     Visible links
> >     1. http://lists.midrange.com/mailman/listinfo/midrange-l
> >     2. http://archive.midrange.com/midrange-l
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.