IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

X-Force STIX\TAXII XFE default feed not downloading any IOC's

  • 1.  X-Force STIX\TAXII XFE default feed not downloading any IOC's

    Posted Fri April 15, 2022 07:42 PM

    The X-Force STIX\TAXII XFE default feed is not downloading any IOC's nor does the Collections I follow feed download all the IOC's that I include in the Following section of Notifications Tab?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: X-Force STIX\TAXII XFE default feed not downloading any IOC's

    Posted Wed April 20, 2022 09:07 AM

    Hi,

    there are some dependencies regarding to configure taxii feeds. I assume you did this steps successfuly. In my cases often it was expedient to select the longest polling initial date > 3 month. Sometimes values in a list much older than the default initial date period...

    Regards,

    Ralph



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: X-Force STIX\TAXII XFE default feed not downloading any IOC's

    Posted Thu April 21, 2022 07:59 PM

    Ralph,

    All is setup correctly on my QRadar STIXX TAXII Feed API.

    There must be a problem functionally with X-Force so I need a technician to perform testing from there to make sure the feeds are downloading to me?

    Thanks



    #QRadar
    #Support
    #SupportMigration