IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Threat Intelligence app pagination

    Posted 12/31/24 01:58 AM

    We are trying to integrate SOCRadar TAXXI feeds via threat intelligence app but after getting some threat feeds like 100K above feeds got stuck during the poll. Can someone help me to resolve this as we contacted vendor as well and they said you guys need to do pagination on the QRadar side. QRadar is unable to handle the API request.



    ------------------------------
    Ihtasham Babar
    ------------------------------


  • 2.  RE: Threat Intelligence app pagination

    Posted 01/01/25 10:01 AM

    Hello, 

    My understanding is that forpagination we need to use STIX and TAXII 2.1. The threat intelligence app currently only supports 2.0:
    https://www.ibm.com/docs/en/qradar-common?topic=feeds-adding-threat-intelligence

    Speaking internally it would appear that this functionality is to be added in a later version of the App and planned for Q1 2025. 
    Regards



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------