IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  QNI Flow is not working

    Posted Thu June 10, 2021 09:01 AM
    Is anyone help us. As we are not getting the QNI Flow to IBM Qradar Console form last 7 Days.


    ------------------------------
    Gazi Asif Mohammed Islam
    ------------------------------


  • 2.  RE: QNI Flow is not working

    Posted Thu June 10, 2021 09:14 AM

    What version of QRadar are you running?  There was a problem I think in 7.4.1 I think it was,  were flows would not shop up in the console.

     

     

    Ray Menard
    Executive Security Consultant –WW
    IBM Security Systems

     

    "Facing difficulties is inevitable, learning from them is optional"

    John C. Maxwell

     

     

    signature_935970874

    Phone: +1 603-660-8808                                                                                                                                      100 West St.
    E-mail:
    rmenard@us.ibm.com

    Webex: https://ibm.webex.com/meet/rmenar                                                                                                        Keene, NH 03431


    This message (including any attachments) may contain confidential information and is intended for a specific addressee(s). If you are not the intended recipient, you should delete this message immediately, and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.

     

     

     






  • 3.  RE: QNI Flow is not working

    Posted Thu June 10, 2021 10:13 AM

    You should open a support case if you are not receiving flow data. The Community forums are not fully monitored by support. I just happened to notice this question in passing.

    Include the following information in your summary

    1. Your QRadar version.
    2. Recent changes. For example, did you recently upgrade? If yes, note your previous version. We have version info in the logs, but it helps us understand where the issue might be occurring if we know of any major changes to the deployment.
    3. Attach logs from your Console, QNI, or QFlow Collector. For more information, see https://ibm.biz/qradarlogs
      NOTE: Never post your logs to any forum, public or private. Logs are definitely not appropriate in community discussions and should only be uploaded with your case.


    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------