IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  API question on QROC

    Posted Tue January 18, 2022 02:38 PM

    Quick question:
    Doing a log source query via the API query builder running it on QROC provides all the fields relevant to the log sources. However when doing it via remote call (curl/python/powerbi) I only get the following fields:

    description

    ID

    Name

     

    noting that I'm using the exact same query just remote. running it on an on-prem QRadar local and remote we get all the fields just qroc that is limiting it. Any idea as to why this is happening?

     

    Sample query - powerbi:

    = Json.Document(Web.Contents("https://console-00506.qradar.ibmcloud.com/api/config/event_sources/log_source_management/log_sources?filter=target_event_collector_id%omitted", [Headers=[SEC="omitted", Version="16.0", Accept="application/json"]]))

     



    ------------------------------
    Terrence Tuwe
    ------------------------------


Related Content