IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  No logs in Network Activity

    Posted 10/31/22 12:43 AM
    Hi,
    Recently we changed the Router device, and after that, we have not received any flow logs in the Network activity tab.

    Do we need to make any changes in QRadar?
    Is there any DSM for it?

    Please help to resolve the issue.

    QRadar version: 7.3.3 Fix pack 9



    Thanks

    ------------------------------
    Arunkumar R
    ------------------------------


  • 2.  RE: No logs in Network Activity

    Posted 10/31/22 03:15 AM
    Arunkumar,
    when you replace your router you have to reconfigure it for sending flow logs to QRADAR. This has not been made. Your network device admin needs to know which flow port and which collector address you are using n case the old configuration has been lost. You will find all Parameter in your flow data source . No DSM involved here.


    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------