IBM QRadar SIEM uses an automated network hierarchy detection from the attached logs and network traffic and uses this data for various threat detection activities. But often, this reflects a part of the corporate network, and not all structures are evident. On the other hand, managing a network hierarchy by hand can be time consuming and prone to error.
To save time and raise the quality of the threat detection, customers may
- need an easy way to view activity and network traffic for their entire deployment
- need to organize their network and systems based on many different variables - including by geographical or business unit data
- require the network hierarchy to be kept up to date frequently
The requirements above call for a reliable method to backup, import, export and restore network hierarchy including geo-location data, reflecting the need partial changes in the network, too.
To increase the efficiency and accuracy of the network hierarchy, the Technology Expert Labs team has developed a solution to allow you to view and organize your network and systems by geography, business unit, role, or similar traffic patterns.
The IBM Security QRadar Network Hierarchy Management App - a Premier App from IBM Technology Expert Labs – Security - enables you to backup, import, export and restore the QRadar network hierarchy, without labor intensive data integration.
On top, you can combine new and existing hierarchy information using ‘differ / merge’ functionality to get a clear view of any changes.
With this user-friendly, packaged and tested app, derived from successful real-life projects, all you need is a few clicks to ensure accuracy whilst saving you valuable time.
Today, the IBM Security QRadar Network Hierarchy Management App is available in Version 3.0 and works best with IBM QRadar Version 7.5 and up.
More details can be found in this PDF.
For any inquiries, contact IBM Technology Expert Labs - Security via tels.apps@ibm.com today or visit the IBM App Exchange (*Link) to express interest.