IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  direct connection to AQL using powerbi

    Posted Mon April 28, 2025 11:16 AM
    Hi, everyone!
    
    We are consuming the Qradar API through PowerBI and when trying to generate graphs for event consumption through the API, we noticed that the API itself does not provide data that we can use in PowerBI.
    
    I would like to know if it is possible to connect directly to the AQL database to search for data about events.
    
    Thanks!


    ------------------------------
    Felipe França
    ------------------------------


  • 2.  RE: direct connection to AQL using powerbi

    Posted Tue April 29, 2025 04:32 AM

    I am not sure what you mean by connecting directly to the AQL database. Events anf flows are stored in the Ariel database, while the Ariel Query Language is a layer above. 

    I may not be an expert in the API, but what problems are you encountering when using the searches through the exposed REST API endpoints? 

    (Side note: I recall I had used in the past something that Chris Meenan posted a long time  - an Excel workbook with a macro where you would put your AQL in one sheet and get the results in the adjacent sheet in the same file   https://github.com/ibm-security-intelligence/visualizations/tree/master/excel )



    ------------------------------
    Dusan VIDOVIC
    ------------------------------