IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Qradar App :: Incident Mapping Template

    Posted 08/19/20 06:44 PM
    Edited by Jasmine 08/20/20 03:07 AM
    Hi,

    I want to add log sources from offense to resilient incident. We can do this via enrichment. But this means extra api calls. Is there any way for send log sources to resilient via app? Seems that log source field doesn't exist in fields. Any advice about this issue would be appreciated.





  • 2.  RE: Qradar App :: Incident Mapping Template

    Posted 08/20/20 12:55 PM
    Still wondering why we can't access all nodes of offense and how we can do that without extra enrichment.

    ------------------------------
    Jasmine
    ------------------------------



Related Content