IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  offenses report

    Posted 12/05/22 03:07 PM

    Hello,

    I want to create monthly offenses report for one domain.

    the problem is that I want only those fields: ID, description, created time.
    I know how to create custom events report but offenses only the default fields of the Qradar.
     
    thanks!



    ------------------------------
    Raz Rossaby
    ------------------------------


  • 2.  RE: offenses report

    Posted 12/06/22 03:27 AM
    Maybe you can use the search on OffenseCreated event (QID 28250369) generated by internal SIM Audit log source.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------



  • 3.  RE: offenses report

    Posted 12/06/22 04:20 AM

    Hii,

    first thanks for your answer!

    it's a problem because the event gives me only the offense created.

    not the domain, and the description of the domain.
     



    ------------------------------
    Raz Rossaby
    ------------------------------

    Original Message


Related Content