We are currently using Qlik Enterprise Manager (QEM) in our organization, deployed on a Windows EC2 instance.
We have a requirement to collect and forward audit logs from QEM into our SIEM platform for monitoring and compliance purposes. Specifically, we are interested in tracking:
Creation of replication tasks
Execution (start/stop) of tasks
User activity (who performed actions)
Job history and status
At present, we have identified that audit-related logs exist on the EC2 instance; however, these logs appear to be encoded/encrypted, and we are unable to decode or interpret them in a readable format.
We would like your guidance on the following:
Is there a supported method or tool to decode or interpret these audit log files?
What is the recommended approach to extract audit and activity logs from QEM for external monitoring systems (SIEM)?
Does QEM provide APIs, database access, or export mechanisms for retrieving audit events in a structured format?
Are there any best practices or official integrations recommended for SIEM platforms?
Our goal is to implement a reliable monitoring solution that provides visibility into:
Who created replication tasks
When they were created
Who executed them
Execution history and outcomes
Environment details:
Qlik Enterprise Manager on Windows EC2
AWS-based infrastructure
SIEM integration requirement
We would appreciate any documentation, best practices, or recommendations you can provide.
