API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Issues with QRadar API - IBM Support was not helpful.

    Posted Tue February 28, 2023 10:32 AM

    I am attempting to utilize the IBM's API to collect log source logs for daily health checks. However I continue to run into issues getting the API commands to run properly. IBM Support essentially told me that they can not help me and that I should post here for assistance. I initially attempt to connect to the api via Powershell using invoke-restmethod however IBM support said I should be utilizing curl instead. 

    Microsoft Windows [Version 10.0.19045.2486]
    (c) Microsoft Corporation. All rights reserved.
    
    
    C:\Users\b157419>curl https://*******.qradar.ibmcloud.com/api/config/event_sources/log_source_management/log_sources -k -S -X GET -u user@name
    Enter host password for user user@name:
    
    
    
    
    <html>
            <head>
                    <title>System Exception</title>
                    <style type="text/css">
                            body {
                                    font-family: "IBM Helvetica Neue", "Helvetica Neue", Helvetica, Arial, Roboto, sans-serif;
                                    margin: 0;
                                    height: 100%;
                                    width: 100%;
                                    display: table;
                                    text-align: center;
                                    font-size: 1rem;
                                    line-height: 1.5;
                            }
                            div {
                                    vertical-align: middle;
                                    display: table-cell;
                            }
                            p {
                                    word-break: break-word;
                            }
                            .warningIcon{
                                    font-size: 6rem;
                                    color: #dc0000;
                            }
                            .sy-h1 {
                                    font-size: 2rem;
                                    margin-top: -2rem;
                                    margin-bottom: 1.875rem;
                                    line-height: 1.11111;
                                    letter-spacing: .5px;
                                    -webkit-font-smoothing: antialiased;
                                    -moz-osx-font-smoothing: grayscale;
                                    font-weight: 600;
                            }
                    </style>
            </head>
            <body>
                    <div>
                            <span class="warningIcon">&#x26a0;</span>
                            <h1 class="sy-h1">Application error</h1>
                            <p> An error has occurred. Return and attempt the action again.</br><b>If the problem persists, please contact customer support for assistance.</b></p>
                    </div>
            </body>
    </html>
    C:\Users\b157419>


    Any assistance would be greatly appreciated. 

    Windows Version 10.0.19045 Build 19045
    curl 7.83.1 (Windows) libcurl/7.83.1 Schannel



    ------------------------------
    Alex Mnich
    ------------------------------


  • 2.  RE: Issues with QRadar API - IBM Support was not helpful.

    Posted Wed March 01, 2023 02:23 AM

    I am afraid you have the wrong group.

    This is the group for the product IBM API Connect (which is an API Management offering), I think you want https://community.ibm.com/community/user/security/communities/community-home?CommunityKey=f9ea5420-0984-4345-ba7a-d93b4e2d4864 which is the group for QRadar.

    Hopefully they will be able to help.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 3.  RE: Issues with QRadar API - IBM Support was not helpful.

    Posted Thu March 02, 2023 09:16 AM

    Thank you for the information. 



    ------------------------------
    Alex Mnich
    ------------------------------



  • 4.  RE: Issues with QRadar API - IBM Support was not helpful.

    Posted Thu March 02, 2023 04:37 AM

    Hi Alex, as Chris says this is the APIC Community not the QRadar Community.

    However looking at the IBM Docs for QRadar here is the documentation on your API call: https://www.ibm.com/docs/en/qradar-on-cloud?topic=SSKMKU/com.ibm.qradar.doc/11.0--config-event_sources-log_source_management-log_sources-GET.htm

    Looks like that call is deprectaed, like many others: https://www.ibm.com/docs/en/qradar-on-cloud?topic=SSKMKU/com.ibm.qradar.doc/c_rest_api_version110_config_intro.htm

    Here are the calls in the IBM Documentation:
    https://www.ibm.com/docs/en/qradar-on-cloud?topic=api-accessing-interactive-documentation-page
    https://www.ibm.com/docs/en/qsip/7.5?topic=api-accessing-interactive-documentation-page

    Hope this helps but raising a post here is probably your best option: https://community.ibm.com/community/user/security/communities/community-home/digestviewer?communitykey=f9ea5420-0984-4345-ba7a-d93b4e2d4864&tab=digestviewer



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Hybrid Cloud Integration Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------