IBM QRadar

 View Only

 QRadar App Exchange and Pulse Dashboards

Michal Grzegorzewicz's profile image
Michal Grzegorzewicz posted Wed November 13, 2024 06:42 PM

QRadar App Exchange provides number of fancy looking extensions, some IBM branded. 

Extensions have nice looking 'Pulse Dashboards', however they do not contain relevant .json file that could be used to add dashboard as presented on App Exchange. 

How it's meant to work? Anything I'm missing here? Any repo of those dashboards presented on App Exchange? 

App Exchange link to one of extensions: 
IBM Security App Exchange - IBM QRadar Custom Properties for Linux

Marketing material - about Pulse and functionality

Fantastic Dashboard Capabilities - QRadar Pulse 2.4

One of dashboards was provided over discussion forum... but not directly with 'extension'? 

Pulse dashboard for GDPR | IBM QRadar

Karl Jaeger's profile image
Karl Jaeger IBM Champion

Michal

this is indeed a tricky one! I will try to clearify your questions. 1st of all: you are missing nothing so far. Alle your links are correct. especially the dashboards available can be found in here and the instructions how to create a new one based on your own AQL query for instance. There is no repo available on App exchange specializing on dashboard json files. The screenshot shows what has been provided so far by Jose. Thanks again to his fantastic contributions. Each content extension comes with new features that can be used in your Qradar rules, dashboards, reports and searches.  An extension contains multiple object types. In many cases the existing features will just get expanded, like in your sample regarding linux. So your existing dashboards may contain new features as in your linux example. The base function is import and export your custom dashboards as json files. Please  search for "dashboard" in app exchange without  focussing on content extension. You will find new functions regarding dashboards like here https://exchange.xforce.ibmcloud.com/hub/extension/f4a537a424977e155105d8aa9f5283c3

Depending on the type of extension you install, there is no general approach, it always depends. Pls use the documentation provided. The "fantastic capabilties" are kind of marketing language - sorry for that. Everything said in here of course is correct. The linux custom properties and the GDPR dashboard are very much independent from each other. If you got more specific questions pls dont hesitate to ask!

BR Karl

json