SQL integration with qradar

Occasional Visitor

Hello everyone

I have the following question please:

I want sql server to send logs to qradar (agentless), I had created the audit table in sql server  , my question is : do we need the sql server credentials (user and pass) in order to pull them( if yes, what role should this user have),  or the audit should be enough, appreciating to share the way to do that in both cases.

Thank you.

0 Replies