IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Exporting Network Activity

    Posted 08/01/19 10:05 AM
    Greetings! Currently one of the projects i am working on is requiring data from Qradar's Network Activity Tab. I have gone through the API and it seems to not do what i need it to do. Has anyone been able to export the Network Activity in a systemic way? 

    The process right now is to manually export it which can take a few hours to complete but if we can get a live feed or a every 10 mins an update, that would work as well.

    ------------------------------
    Matthew Painter
    ------------------------------


  • 2.  RE: Exporting Network Activity

    Posted 08/16/19 09:08 PM
    have you tried setting up offline JSON forwarding ?

    https://www-01.ibm.com/support/docview.wss?uid=swg21978147

    ------------------------------
    Christopher Meenan
    ------------------------------