IBM Security QRadar

 View Only

  • 1.  Quick Question on API_User

    Posted Tue September 28, 2021 12:01 PM
    Edited by Josh V Tue September 28, 2021 12:08 PM
    I've noticed that a few of the offense that I have closed in QRadar show up as API_User:bob as the user instead of just say bob. . Anyone know what could be causing this? 



  • 2.  RE: Quick Question on API_User

    Posted Wed September 29, 2021 12:57 PM
    Hi Josh,
    Are you using
    1)The API  to close the offense.
    2) The supplied credentials while doing are that of  bob.
    If so,  the tag "API_User" is reflective of the method (API endpoint instead of the UI) used to close the offense.
    Warm Regards,
    Sree

    ------------------------------
    SREE ANANTHASAYANAM
    ------------------------------

    Original Message