IBM Security QRadar

 View Only

  • 1.  Is it possible to merge users in UBA?

    Posted Tue April 30, 2019 08:23 AM
    Hello
    We have two diferent identity sources that report to our QRadar, one is an Active directory from where we synchronize users for UBA, and another is a standalone server, in which we create local users with the same username as in Active Directory (sometimes the username differs, but only in a few cases). The problem is that Qradar generates 2 diferent users, one from Active Directory sync and other from the events reported by the standalone server, is there a way to merge these users from standalone server with the users synced from AD?

    Thanks in advanced

    ------------------------------
    A CG
    ------------------------------


  • 2.  RE: Is it possible to merge users in UBA?
    Best Answer

    Posted Wed May 01, 2019 09:39 AM
    Answered by dev here: https://developer.ibm.com/answers/questions/503122/is-it-possible-to-merge-users-in-uba/

    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message


  • 3.  RE: Is it possible to merge users in UBA?

    Posted Wed May 01, 2019 05:25 PM
    Ok, thanks.

    ------------------------------
    A CG
    ------------------------------

    Original Message