IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

How to Display Total Log Source Count in Pulse Using QRadar API

  • 1.  How to Display Total Log Source Count in Pulse Using QRadar API

    Posted 2 days ago

    Hello everyone,

    I'm trying to build a new dashboard item in the QRadar Pulse app, and I could use some help.

    I want to show the total number of log sources using the QRadar API, and I found this endpoint:

    GET /config/event_sources/log_source_management/log_sources

    However, I'm not sure how to get just the count and display it on Pulse.

    Also, I'd like to separate the counts by status - for example:

    - total log sources

    - log sources with status Error

    - log sources with status OK

    I think maybe results mapping is the way to go, but I don't really understand how to use it.

    Any guidance or examples would be greatly appreciated.

    Thanks in advance



    ------------------------------
    Zerah Kim
    ------------------------------


Related Content