Hi,

I have a database tables that I would like to ingest into qradar, is there a way of doing a query to get thoses informations ingested to qradar ?

I am still looking because thoses tables are not stored anywhere and the only way to get them is to make a query to collecte thoses informations.

Thanks

You can use the JDBC protocol in QRadar to access most databases types, such as MySQL, Postgres, MSDE, etc. You can either point to a table  in the protocol or do something like create a materialized view, then poll that information for QRadar if there is specific data you want to get in to QRadar instead of pointing to an individual table. For more information on the JDBC protocol, see https://www.ibm.com/docs/en/dsm?topic=labs-jdbc-protocol-configuration-options " target="_blank" rel="noopener">JDBC protocol configuration options.

------------------------------
Jonathan Pechta
QRadar Support Content Lead
Support forums: ibm.biz/qradarforums
jonathan.pechta1@ibm.com
------------------------------

Hi Jonathan,

Thanks for your answer.

Cordialy,