IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How should I export Log source list in Qradar

    Posted Tue January 28, 2020 01:53 AM
    ​Hi All,

    Might be its simple but I am finding it difficult to export or to get the list of log sources in Qradar. I wanted it in Excel or csv format. I tried creating a report and it succeeded but all I am getting in pdf format and that too I cant edit.

    Please assist.


    Regards
    Asif Siddiqui

    ------------------------------
    asif siddiqui
    ------------------------------


  • 2.  RE: How should I export Log source list in Qradar

    Posted Tue January 28, 2020 03:19 AM
    If you use the QRadar Log Source Management app
    The is simply a download button on the right side next to the Manage Colums botton.

    If you do not have it installed you can downloaded via the app exchange.
    QRadar Log Source Management - IBM Security App Exchange
    Ibmcloud remove preview
    QRadar Log Source Management - IBM Security App Exchange
    IBM X-Force Exchange is a threat intelligence sharing platform enabling research on security threats, aggregation of intelligence, and collaboration with peers
    View this on Ibmcloud >



    ------------------------------
    Jan-dirk Prins
    ------------------------------



  • 3.  RE: How should I export Log source list in Qradar

    Posted Tue January 28, 2020 06:45 AM
    ​Thanks Jan-Dirk,

    Cant I export it through report? or any other method?



    Regards
    Asif Siddiqui

    ------------------------------
    asif siddiqui
    ------------------------------



  • 4.  RE: How should I export Log source list in Qradar

    Posted Tue January 28, 2020 07:15 AM
    Default export in all colums to CSV
    You can also choose if you what to export only visible columns and you can also select which columns are displayed.

    csv can be read by excel so with it you can do some filtering as well.

    Good luck.

    ------------------------------
    Jan-dirk Prins
    ------------------------------



  • 5.  RE: How should I export Log source list in Qradar

    Posted Wed January 29, 2020 11:55 AM
    Create a event search for 'Log Source Type' by count, or 'Log Source' by count.  Can export to Excel for tables and graphs.
    LS Type by count


    ------------------------------
    John Wyckoff
    QRadar Dude (Ex-BigFixer)
    IBMer (twice, with stints at Intel and Novell)
    Located in New England, cover North America
    802-825-5863
    Farm website - http://www.3sheepstothewind.com
    ------------------------------