IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Universal cloud rest api

    Posted 09/21/21 10:31 AM
    good afternoon everyone,

    i am new to qradar. I am using qradar on cloud. I try to use the universal cloud rest api but I have not found it. is this module supported by the qradar cloud or not?
    thank you in advance.

    ------------------------------
    naeel mostafa
    ------------------------------


  • 2.  RE: Universal cloud rest api

    Posted 11/01/21 10:23 AM
    I am not sure it the question relates to QRadar on Cloud instances or collecting data from IBM Cloud as the events source...
    Nevertheless, there are a number of sources already supported for event collection using REST API; you can check the actual DSM guide (here is a short link I created a while ago).
    You would probably use the Universal Cloud REST API protocol in case you have something that is not supported out of the box. For the sample workflows available on github, IBM (understandably) cannot offer support - but I am sure they can be quite helpful. Probably you've already found the short intro on youtube by Jose Bravo.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------