IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Import list of domain controllers from LDAP to reference set

    Posted Tue March 05, 2024 09:22 AM

    Hello everyone,

    we are currently looking to import the list of domain controllers, users etc to reference sets from LDAP. We did try the UB User Import option. It also shows that  the number of users extracted is 5 but unfortunately there is absolutely no information in the associated reference set. Can anyone enlighten me and give me some tips as to how to proceed with the same?

    Thanks in advance

    Best Regards

    Alvita



    ------------------------------
    Alvita M
    ------------------------------


  • 2.  RE: Import list of domain controllers from LDAP to reference set

    Posted Tue March 05, 2024 03:24 PM

    Hi Alvita,

    This will depend on how you want to import the data.  Is this a mnaual import?  If so you may be able to utlise the refernce set API in Qradar

    https://www.ibm.com/docs/en/qradar-on-cloud?topic=qradar-creating-reference-data-collections-apis

    Do you have more details on what you are trying to achieve and what the use cases for the data?

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------



  • 3.  RE: Import list of domain controllers from LDAP to reference set

    Posted Wed March 06, 2024 04:22 AM

    Hi John,

    we are trying to import automatically via LDAP. Any suggestions for the same ?

    Best Regards

    Alvita



    ------------------------------
    Alvita M
    ------------------------------