IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar mouse over IP action - show DNS name

    Posted Wed October 23, 2019 08:55 AM
    Hi!
    Is there a possibility to add DNS real time name resolution for IPs while hovering the mouse over the IP in log activity or within events?

    As per default you get this more or less useful information popup. There the asset name field is only filled when there's given name to the asset. In a dhcp network that is close to worthless. For each IP you can right click >> More Options... >> DNS Lookup, but that's not really a solution...

    Is it possible to either add DNS name to the asset name field? Or edit the mouse over popup information to include DNS information?

    Thanks you very much!

    Bye
    Roman

    ------------------------------
    Roman Russland
    ------------------------------


  • 2.  RE: QRadar mouse over IP action - show DNS name

    Posted Fri October 25, 2019 05:36 PM

    Hey Roman,

    I believe that this was answered in the following posts, but let us know in the Support Forums if you have follow-up questions by updating one of these threads and we can discuss further. 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 3.  RE: QRadar mouse over IP action - show DNS name

    Posted Fri October 25, 2019 09:03 PM
    Doesn't the recorded future app leverage hover over enrichment?


    Original Message


Related Content