IBM QRadar SOAR

View Only

Pierre Dufresne posted Wed July 16, 2025 04:43 PM

HI everybody,

I just installed the ODBC Data Feeder.

In the app.config, is there a way to configure the replication of the incidents only and only certain fields?

And can someone explain the meaning of the reload=false parameter.

Thanks

Mohamad islam Hamadieh posted Mon July 21, 2025 02:03 AM

there is one option "exclude_incident_fields_file" , you can create a file from app setting and point that to it.

from my experience it doesn't work as expected though but you can try it.

Data Feeder for ODBC Databases - QRadar SOAR Apps

this is the desription of reload = false from the documintaion.

reload=True - This app.config setting will synchronize all incidents (including those closed) each time resilient-circuits is run. Review performance considerations above in [Considerations].

Pierre Dufresne posted Tue July 22, 2025 04:34 PM

Thanks Mohamad, I finally found the information in the documentation.

I was wondering if it is possible to evaluate the current size of the SOAR database.

Note: our SOAR instance is in the cloud

Related Content