IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Unable to add values in Reference Map of Sets

    Posted Tue February 25, 2025 05:46 AM
    Hello Support,
     
    We are currently experiencing an issue where we are unable to add values to the Reference Map of Sets. After adding values, they disappear from the Reference Map once the page is refreshed. We can see events related to the values being added in the QRadar Audit Events.
     
    We have attempted to add values through both Reference Management and the Console CLI, but unfortunately, we have not had any success. However, we are able to successfully add values to the Map of Sets via the QRadar Interactive API but its not a feasible option for all users.
     
    Please assist for this issue.
    Regards,
    Aby Francis


    ------------------------------
    Aby Francis
    ------------------------------


  • 2.  RE: Unable to add values in Reference Map of Sets

    Posted Wed February 26, 2025 11:19 AM

    Hi Aby,

    Is there any error message in the qradar.log or qradar.error?

    I would suggest you open a support case regarding this to allow the logs to be reviewed.

    Thanks

    John



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Unable to add values in Reference Map of Sets

    Posted Fri February 28, 2025 04:40 AM

    Hi John,

    We have already opened a case with IBM Support, but they were unable to identify the issue. Hence they suggested to check on form. 

    Additionally, did not find any logs related on qradar.log and qradar.error.



    ------------------------------
    Aby Francis
    ------------------------------

    Original Message


Related Content