Hi,
A new ticket tool (Symphony Summit) has been launched and needs to integrate with QRadar SIEM to create tickets automatically for an offense.

Does anyone know the procedure to implement the requirement?


Thanks

------------------------------
Arunkumar R
------------------------------

Symphony Summit has an API that can be used to create incidents. There are a number of methods to integrate QRadar with external products, such as a right-click option in the user interface, creating an app for QRadar, or event a Custom Action Script to send an API post based on the offense name. 

I think a custom action script is likely the easiest method here, as you can get Rule Reponse for the Offense to run a post with the API key from your Symphony Summit instance and send the offense details. 

• You'll need an API key: https://docs.symphonysummitai.com/display/TAHSP3/API+Authentication+and+Authorization
• Then a script (python, bash, perl) to create your incident for you. https://docs.symphonysummitai.com/display/TAHSP3/Create+or+Update+an+Incident#

------------------------------
Jonathan Pechta
QRadar Support Content Lead
Support forums: ibm.biz/qradarforums
jonathan.pechta1@ibm.com
------------------------------