IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Customized Email Template

    Posted Wed April 01, 2020 09:44 AM
    Hi People
    Hope you all are healty and safe

    I cutomized the alert-config.xml file and added a new template and set that new template in the offense to send customized alert to a customer but Qradar is sending the alerts with the default template.
    Someone have some idea why is this happening?

    I executed the /opt/qradar/bin/runCustAlertValidator.sh script and did a full deploy in the console but it didn't work.

    Thank You

    ------------------------------
    Johan Lopez
    ------------------------------


  • 2.  RE: Customized Email Template

    Posted Thu April 02, 2020 08:37 AM
    Hi,
    Is the <active></active> property set to True?
    As documented:Important:
    The <active></active> property must be set to True for each event and flow template type that you want to appear as an option in QRadar. You must also ensure that the <filename></filename> property is left empty.
    Stay safe as well.
    Thanks and Regards.
    Sree

    ​

    ------------------------------
    SREE ANANTHASAYANAM
    ------------------------------

    Original Message