IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Configuring QRadar 7.4 email server

    Posted 12/09/20 04:34 PM

    Hello,

    I'm configuring the sending of email from QRadar.

    I have QRadar 7.4.

    I would like to set localhost as email server (hostname: localhost, port: 25)

    With this configuration no email is sent.

    Looking at /etc/postfix/main.cf there are:

    relayhost= [localhost]:25

    If i delete this line the email are delivered...

    Unfortunately this configuration is not permanent and if I do any deployment the line returns...

    How can I configure a local server mail?

    Thank you



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Configuring QRadar 7.4 email server

    Posted 12/15/20 12:35 PM

    Hi,

    localhost is email server by default. No need to manipulate postfix. Not recommended either. All you need to do is configure email server in admin tab and deploy. BR Karl



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Configuring QRadar 7.4 email server

    Posted 12/16/20 10:43 AM

    I did it.

    I configured from console email server as localhost but it doesn't work.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: Configuring QRadar 7.4 email server

    Posted 11/03/22 09:36 AM
    Hello,
    Did you find a fix for your problem? I am facing the same issue.
    Please advise.
    Thanks in advance.

    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------

    Original Message


  • 5.  RE: Configuring QRadar 7.4 email server

    Posted 11/07/22 09:32 AM
    Root@localhost should always work. Pls double check emails received using command line.

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


  • 6.  RE: Configuring QRadar 7.4 email server

    Posted 11/07/22 09:41 AM
    Hello @Karl Jaeger
    Thank you for your response.
    Below are my settings, only Alert EMail is modified, however it doesn't work.
    Please advise.

    ​​

    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------

    Original Message


  • 7.  RE: Configuring QRadar 7.4 email server

    Posted 11/07/22 02:15 PM
    Hi
    in addition to that you have to define your SMTP host like this
    Check you local email using mail command. If your offense email arrives rerun your test using external SMTP server.

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


Related Content