IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Automatic Ticket Creation

    Posted Thu April 20, 2023 04:59 AM

    Hi,
    A new ticket tool (Symphony Summit) has been launched and needs to integrate with QRadar SIEM to create tickets automatically for an offense.

    Does anyone know the procedure to implement the requirement?


    Thanks



    ------------------------------
    Arunkumar R
    ------------------------------


  • 2.  RE: Automatic Ticket Creation

    Posted Thu April 20, 2023 05:32 PM

    Symphony Summit has an API that can be used to create incidents. There are a number of methods to integrate QRadar with external products, such as a right-click option in the user interface, creating an app for QRadar, or event a Custom Action Script to send an API post based on the offense name. 

    I think a custom action script is likely the easiest method here, as you can get Rule Reponse for the Offense to run a post with the API key from your Symphony Summit instance and send the offense details. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message