IBM Security QRadar

 View Only
  • 1.  Introducing the IBM QRadar Data Synchronization App

    Posted Tue September 08, 2020 02:56 PM
    Edited by Joel Violette Tue September 08, 2020 03:06 PM

    IBM QRadar Data Synchronization App released today.

    Download it on the IBM Security App Exchange and view our release day blog.



  • 2.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted Wed September 09, 2020 08:38 AM
    Hi - Awesome News! I have had to in the past come up with some creative solutions to replicate data. Does it automatically, add it self to the the firewalls of each of the managed hosts in the deployment too? Any data that the content management tool or config back up would bring over?

    Thanks!

    Ian





  • 3.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted Wed September 09, 2020 02:49 PM

    Hi Ian! 

    1. Yes - the pairing process in the UI creates the proper firewall rules for you.

    2. Here's a list of the config and data that the config backup will bring over to the destination site:

    • Custom Event and Flow Properties
    • Custom Event Mappings
    • Custom Log Source Types
    • Custom QIDs
    • Custom Rules
    • FGroup data
    • Flow Sources
    • Historical rules and searches
    • Log Source Extensions
    • Log Sources
    • Network hierarchy
    • Obfuscation data
    • Reference data
    • Reference sets
    • Report templates
    • Retention settings
    • Saved Searches
    • System Settings


    Thanks!

    Joel



    ------------------------------
    Joel Violette
    ------------------------------



  • 4.  RE: Introducing the IBM QRadar Data Synchronization App

    Posted Wed September 09, 2020 10:52 AM
    Thanks for information!

    ------------------------------
    NC Aluminum CEO
    ------------------------------