Hello team.

Could you help me please? how can I export through the Qradar API a specific reference set to a TXT or CSV file. Can it be done through some script? do you have it?

What I need is to export a specific RS to a file via API or Script.

Thank you very much

You can use the QRadar interactive API interface to run your query. When you successfully run a GET against the reference set API, the interface provides a CURL command to run that query from the command-line.

When you've got your command-line CURL example, you just need to add an output to your CURL command to write the json data (just append -o myjsonrefset.json), then you can convert it as needed to CSV.

There are multiple tools to do this from your workstation, like JSON2CSV, csvkit, Python, or even in R where you can format and work with the data.

I will also note that the Reference Data Management app can export a reference set to a file as well. It isn't automated, per your question. However, if you needed data urgently while you work on your script.