IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Resilient Systems QRadar Integration

    Posted Tue February 25, 2020 08:53 AM
    Hi Team,

    I've setup a QRadar CE and integrating Resilient with the help of below link:

    https://exchange.xforce.ibmcloud.com/api/hub/extensionsNew/8065d2690f403be3b9aad1999f326483/Resilient_Systems_QRadar_Integration_Guide.pdf

    While confuring the Resilient into QRadar 7.3.1 CE I'm getting below error.



    Can anyone please help me out solve this issue?

    Regards
    Pranav


    ------------------------------
    Pranav Sankar
    ------------------------------


  • 2.  RE: Resilient Systems QRadar Integration
    Best Answer

    Posted Wed February 26, 2020 08:58 AM
    Based on the error message, some potential issues:

    * hostname as configured is incorrect
    * network connectivity between the qrardar server and hostname is not set up
    * network device between the qradar server and hostname is causing the connection to drop

    You can log into the docker container hosting the resilient app and try a curl command or telnet command to the hostname and port.

    ------------------------------
    Ben Lurie
    ------------------------------