IBM Security QRadar

Hello everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

Hello everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

Hello everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

Hello everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!

Hello everyone!

I want to push indicators (IOCs) from ThreatConnect to QRadar reference sets. I make sure ThreatConnect installed QRadar Integration app.

Regarding the configuration on ThreatConnect, first I create an API User and grant permissions. Then I create a new job, but when I go to the settings like picture below, I don't know if the QRadar API base URI is correct (and how to find it on QRadar). Therefore, I have not been able to push any indicator to QRadar yet.

Besides, I also don't know how to configure QRadar side. Looking forward to your help!