IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Configuring QRadar 7.4 email server

    Posted Wed December 09, 2020 04:34 PM

    Hello,

    I'm configuring the sending of email from QRadar.

    I have QRadar 7.4.

    I would like to set localhost as email server (hostname: localhost, port: 25)

    With this configuration no email is sent.

    Looking at /etc/postfix/main.cf there are:

    relayhost= [localhost]:25

    If i delete this line the email are delivered...

    Unfortunately this configuration is not permanent and if I do any deployment the line returns...

    How can I configure a local server mail?

    Thank you



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Configuring QRadar 7.4 email server

    Posted Tue December 15, 2020 12:35 PM

    Hi,

    localhost is email server by default. No need to manipulate postfix. Not recommended either. All you need to do is configure email server in admin tab and deploy. BR Karl



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Configuring QRadar 7.4 email server

    Posted Wed December 16, 2020 10:43 AM

    I did it.

    I configured from console email server as localhost but it doesn't work.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: Configuring QRadar 7.4 email server

    Posted Thu November 03, 2022 09:36 AM
    Hello,
    Did you find a fix for your problem? I am facing the same issue.
    Please advise.
    Thanks in advance.

    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------

    Original Message


  • 5.  RE: Configuring QRadar 7.4 email server

    Posted Mon November 07, 2022 09:32 AM
    Root@localhost should always work. Pls double check emails received using command line.

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


  • 6.  RE: Configuring QRadar 7.4 email server

    Posted Mon November 07, 2022 09:41 AM
    Hello @Karl Jaeger
    Thank you for your response.
    Below are my settings, only Alert EMail is modified, however it doesn't work.
    Please advise.

    ​​

    ------------------------------
    --
    Thanks and Best Regards,
    Siddarth
    ------------------------------

    Original Message


  • 7.  RE: Configuring QRadar 7.4 email server

    Posted Mon November 07, 2022 02:15 PM
    Hi
    in addition to that you have to define your SMTP host like this
    Check you local email using mail command. If your offense email arrives rerun your test using external SMTP server.

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message