IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

No Rules and BBs partially or full matched

  • 1.  No Rules and BBs partially or full matched

    Posted Wed May 30, 2018 09:23 AM
    Hey,

    currently we're facing a problem, where no events/flows match any Rule or a Building Block. No full Matches and no partially Matches - simply nothing. The Rule "Load Basic Building Blocks" is enabled and has not been edited. What can we do to fix this?

    We currently are on QRadar 7.3.1 Patch 2

    Thx for any advices on this.