IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Greyed out options in Qradar

    Posted Wed August 31, 2022 01:52 PM
    Hi, I am newbie to Qradar. Using Qradar CE home and full Qradar version in work and I found out that when I am trying to create new rule, all the options, cancel excluded are greyed out (impossible to click). The only workaround I found was use compatibility mode in microsoft explorer. I have some colleagues who are working with Qradar for long time and based on what they told me, they can create rule just fine in for example Firefox. For me its not possible. I tried, Firefox, Opera, Brave, Vivaldi, no luck. I said to myself the upgrade will help, but there is no possible upgrade CE from what I understand. Is this some bug and why some ppl doesnt seems to have the problem? Thank you for any reply!

    Regards
    TT

    ------------------------------
    Tomas Tyser
    ------------------------------


  • 2.  RE: Greyed out options in Qradar

    Posted Wed August 31, 2022 03:36 PM
    I think you are likely trying to create an anomaly rule in QRadar and the search you are using is not saved. Take a look at this technical note: https://www.ibm.com/support/pages/node/520623

    If this isn't your issue and you are experiencing problems in the Rules Wizard, let me know.

    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 3.  RE: Greyed out options in Qradar

    Posted Thu September 01, 2022 02:40 AM
    Edited by tysa Thu September 01, 2022 02:59 AM
    Hi Jonathan, it's problem with the Rules Wizard. The only mention about this problem I was able to find is in the following link. Also the workaround I use is based on the disscusion from the link https://www.reddit.com/r/QRadar/comments/v29ou3/did_the_new_chrome_update_mess_anyone_elses/
    greyed buttons

    Here is the only one possible option where it's working, Microsoft Explorer.
    not greyed out buttons


    ------------------------------
    Tomas Tyser
    ------------------------------

    Original Message


  • 4.  RE: Greyed out options in Qradar

    Posted Fri September 02, 2022 04:38 AM
    Found this thread, but not sure it's just me or all the replies are really empty?
    https://community.ibm.com/community/user/security/discussion/looks-like-rule-creationmodification-is-not-working-from-chrome-browser?ReturnUrl=%2fcommunity%2fuser%2fsecurity%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3df9ea5420-0984-4345-ba7a-d93b4e2d4864%26tab%3ddigestviewer#bmffc6ecd6-3e0e-4521-9ec2-5abdd2bd7d26

    ------------------------------
    Tomas Tyser
    ------------------------------

    Original Message