IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Introducing the IBM QRadar Data Synchronization App

    Posted 09/08/20 02:56 PM
    Edited by Joel Violette 09/08/20 03:06 PM

    IBM QRadar Data Synchronization App released today.

    Download it on the IBM Security App Exchange and view our release day blog.



  • 2.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted 09/09/20 08:38 AM
    Hi - Awesome News! I have had to in the past come up with some creative solutions to replicate data. Does it automatically, add it self to the the firewalls of each of the managed hosts in the deployment too? Any data that the content management tool or config back up would bring over?

    Thanks!

    Ian





  • 3.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted 09/09/20 02:49 PM

    Hi Ian! 

    1. Yes - the pairing process in the UI creates the proper firewall rules for you.

    2. Here's a list of the config and data that the config backup will bring over to the destination site:

    • Custom Event and Flow Properties
    • Custom Event Mappings
    • Custom Log Source Types
    • Custom QIDs
    • Custom Rules
    • FGroup data
    • Flow Sources
    • Historical rules and searches
    • Log Source Extensions
    • Log Sources
    • Network hierarchy
    • Obfuscation data
    • Reference data
    • Reference sets
    • Report templates
    • Retention settings
    • Saved Searches
    • System Settings


    Thanks!

    Joel



    ------------------------------
    Joel Violette
    ------------------------------



  • 4.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted 09/09/20 10:52 AM
    Thanks for information!

    ------------------------------
    NC Aluminum CEO
    ------------------------------