IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Creating a custom DSM using REST API

    Posted Wed July 28, 2021 11:15 AM

    Hello, we are using Qradar 7.4.1 fixpack 1.

    We have a customer with an XDR called Cynet 360. This XDR has its own API, which is not listed in the protocol type list while creating a new log source.

    Can we create a custom protocol type of REST API, and write the API requests on ourselves?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Creating a custom DSM using REST API

    Posted Wed July 28, 2021 03:18 PM

    You probably want to use the Universal Cloud REST API to get this data. There is a good example as a blog here: https://community.ibm.com/community/user/security/blogs/sophia-sampath1/2020/10/05/introducing-the-universal-cloud-connector

    Note: It is sometimes also called "Universal Cloud Connector" depending on who you talk with, but here is the official documentation about this feature: https://www.ibm.com/docs/en/dsm?topic=configuration-universal-cloud-rest-api-protocol



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Creating a custom DSM using REST API

    Posted Mon August 02, 2021 08:31 AM

    Can we use it although it is not a cloud based application? This is an XDR on a local server, in the same network where the collector is.



    #QRadar
    #Support
    #SupportMigration


Related Content