IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Offenses Forwarder setup

    Posted 04/03/24 09:50 AM

    Hi Team,

    I tried to setup Offenses Forwarder in Qroc instance.

    I created an authorized service token, but when I used it in the Offenses Forwarder app, I get this error: Failed to validate Authorized service token.

    Can you please help me to setup Offenses Forwarder in QRoc ?

    Guillaume



    ------------------------------
    Guillaume Morillo IT Security Specialist
    IT Consultant
    IBM
    bois colombes
    (3367) 275-3217
    ------------------------------


  • 2.  RE: Offenses Forwarder setup

    Posted 04/04/24 05:42 AM

    Hi Guillaume

    little Info in here. The documentaion is stored at https://www.ibm.com/docs/en/security-qradar/log-insights/saas?topic=overview-setting-up-qradar-offenses-forwarder

    From my perspective offense forwarder is designed to forward Qradar offenses from on prem to cloud via connector appliance = dlc. We did this using the beta release issued last year. What is your Qroc environment? Traditional Qradar installed in cloud? Something else? 

    If the 1st is true you should be able to install offense forwarder app. Service Token should be straight forward.

    BR Karl



    ------------------------------
    [Karl] [Jaeger] [#ibmchampion]
    [QRadar Specialist]
    [cnag]
    [Siegen] [Germany]
    ------------------------------