IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  How can I manage Reference Map of Maps

    Posted Thu March 25, 2021 11:56 AM

    According to Reference Data Management app docs:

    "The app allows the creation, deletion and visualization of all types of Reference Data in QRadar"

    But I cannot see Reference Map of Maps there. Neither can I create, delete one nor add/remove entries from it.

    Can anyone explain?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: How can I manage Reference Map of Maps

    Posted Thu April 01, 2021 05:39 AM

    Hello,

    Please check this conversation. Hope it helps.

    https://www.ibm.com/mysupport/s/question/0D50z00006PEJWL/what-are-reference-maps-reference-map-of-sets?language=it

    Thanks,

    Ashish



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: How can I manage Reference Map of Maps

    Posted Thu April 01, 2021 06:58 AM

    Sorry, but not really. I do know what each Reference Data type is. It is just that there seems no way to work with Reference Map of Maps in API nor in Reference Data Management app only via CLI.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: How can I manage Reference Map of Maps

    Posted Wed August 04, 2021 10:27 AM

    Reference MapOfMaps and Reference Tables are (from the API perspective) the same thing. (The difference between the two calls is the keyNameTypes parameter. Without it, a MapOfMaps is created).

    From the CLI and Rule filters though, they are different.

    In the App, you can only create a Table. But if you already have a MapOfMaps - it will show up in the 'Table ' Section.



    #QRadar
    #Support
    #SupportMigration


Related Content