Ingesting eMaximo logs into Sentinel or Syslog server

Question

I'm trying to ingest eMaximo (IBM Maximo) into our Sentinel SIEM. I cannot find any documentation regarding it. Has anyone setup ingesting logs for eMaximo into Sentinel?

Answer 1

Hi @Jones, Charles (InfoSec) ,
My approach with IBM products it to search the Q&A forums for how they connect to QRadar.
And in the case of eMaximo I couldn't find any connectivity documentation for QRadar.
So my next suggestion would be to open a ticket with the vendor and ask them if they support any logging methods.
Hopefully it supports syslog, then it's a no-brainer.
If it's an api you'd need to create an http connector using LogicApps and you'd need a good understanding of the api.

Sorry if that's not the answer you were looking for but it's the best I can offer w/o having access to a good knowledgebase and/or documentation.

Best regards.