Hi Team,

I installed a new QRadar in AWS. I am having trouble setting up the Email Server. I want to send email to external contacts from my org as well as outside. How do I set up the email server?

Which email ID QRadar uses to send emails and If I want to change sender email, how do I do that?

It would help if someone explicitly outlines the steps.

Thanks, Sushanta

------------------------------
Sushanta Sena
------------------------------

Hi Sushanta,

Email integration and support varies between versions. Are you attempting this on 7.3.2 or 7.3.3, or taken a punt on 7.4.0?

Regards,

------------------------------
Darren H.
------------------------------

Hi Darren,

I am attempting this on 7.3.2.


Thanks, Sushanta

------------------------------
Sushanta Sena
------------------------------

Original Message:
Sent: Wed May 06, 2020 08:40 AM
From: Darren H.
Subject: Setting up Email Server in QRadar

Hi Sushanta,

Email integration and support varies between versions. Are you attempting this on 7.3.2 or 7.3.3, or taken a punt on 7.4.0?

Regards,

------------------------------
Darren H.
------------------------------

Ok, 7.3.2 has limited options.

But there was another post on this in last 24 hours and guidance from two years ago is here:

https://www.ibm.com/mysupport/s/question/0D50z00006PFaxjCAD/qradar-smtp-with-authentication?language=en_US

Regards,

------------------------------
Darren H.
------------------------------

Original Message:
Sent: Thu May 07, 2020 05:48 AM
From: Sushanta Sena
Subject: Setting up Email Server in QRadar

Hi Darren,

I am attempting this on 7.3.2.


Thanks, Sushanta

------------------------------
Sushanta Sena
------------------------------


Original Message:
Sent: Wed May 06, 2020 08:40 AM
From: Darren H.
Subject: Setting up Email Server in QRadar

Hi Sushanta,

Email integration and support varies between versions. Are you attempting this on 7.3.2 or 7.3.3, or taken a punt on 7.4.0?

Regards,

------------------------------
Darren H.

Hi Sushanta,
You can set up the email server and change it in the UI, you just need go to admin > System and license management, when you see your deploy (Console, collectors, events procesor) open the console it will be open in a pop up window and you can see in the last tab the email server option, just click on it and set or change your email server.
If this don't work you can try using the qchange_netsetup command, you must use this command in the VM using the root user.

Hope it work to you, regards

------------------------------
Johan Lopez
------------------------------

Hi Sushanta,
do you only need SMTP or SMTP Auth?
- SMTP should just work via GUI as Johan described it.
- For SMTP Auth I wrote a manual for 7.3.3 which probably works with 7.3.2 as well.

I'd be happy to send it to you if you are interested.

------------------------------
Kind regards
Oliver
------------------------------

Hi Oliver,
Sorry for the late response. I am looking for SMTP Auth where I can send alerts/ notification from QRadar using my O365 email ID.
Could you please help with the manual?

Thank you for your help.

Thanks, Sushanta

------------------------------
Sushanta Sena
------------------------------

Original Message:
Sent: Mon May 11, 2020 04:00 PM
From: Oliver Braun
Subject: Setting up Email Server in QRadar

Hi Sushanta,
do you only need SMTP or SMTP Auth?
- SMTP should just work via GUI as Johan described it.
- For SMTP Auth I wrote a manual for 7.3.3 which probably works with 7.3.2 as well.

I'd be happy to send it to you if you are interested.

------------------------------
Kind regards
Oliver
------------------------------