Forwarding to IBM Cloud Pak for Multicloud Management

Prerequisite: A grafeas-service-admin-id API key in IBM Cloud Pak for Multicloud Management

To forward event data to IBM Cloud Pak for Multicloud Management:

1. From the Settings module of the Sysdig Secure UI, navigate to the Events Forwarding tab.

2. Click the Add Integration button.

3. Select IBM MCM from the drop-down menu.

4. Configure the required options:

   

   Integration Name: Define an integration name.

   URL: This is the URL for your MCM API endpoint. This should be the same that you use to connect to the IBM MCM CloudPak console. Be sure to use the format scheme://host:port.

   Grafeas API Key:: You need to create a Grafeas API key that Sysdig will use to authorize and authenticate.

   Account ID: (Optional) You can leave it blank to use the default value of id-mycluster-account. If you want to use a different account name, provide it here.

   Data to send: Currently, Sysdig only supports sending policy events.

   Select whether or not you want to allow insecure connections (i.e. invalid or self-signed certificate on the receiving side).

   Toggle the enable switch as necessary. Remember that you will need to “Test Integration” with the button below before enabling the integration.

5. Click the Save button to save the integration.

Here is an example of how events forwarded from Sysdig Secure are displayed on IBM Multicloud Managment Console: