IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Alien Vault Taxii Feed not polling

    Posted Fri June 04, 2021 12:20 PM

    Hello,

    i have configured the AlienVault OTX Taxii feed; everything seems fine, the connection is ok, but no data has been retrieved from the feed. I can only choose between 2 collection: myusername and AlienVault. I'm tryng to follow other pulses, but i can always choose between myusername and Alienvault. What am i doing wrong?

    Thanks,



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Alien Vault Taxii Feed not polling

    Posted Mon July 19, 2021 11:28 PM

    Is this still an issue? Does the poll.log show any data collection for your reference set? If you can update this we might be able to advise further, but as this is an older post, update and let us know if this feed is working.

    our article on reviewing logs for application error might be of help to you

    https://www.ibm.com/support/pages/qradar-review-logs-applications-errors



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Alien Vault Taxii Feed not polling

    Posted Tue July 20, 2021 07:07 AM

    Hello,

    now seems ok, just need to wait a couple of days and feeds are working now.

    Thank you



    #QRadar
    #Support
    #SupportMigration