IBM Security QRadar

 View Only

API question on QROC

  • 1.  API question on QROC

    Posted Tue January 18, 2022 02:38 PM

    Quick question:
    Doing a log source query via the API query builder running it on QROC provides all the fields relevant to the log sources. However when doing it via remote call (curl/python/powerbi) I only get the following fields:

    description

    ID

    Name

     

    noting that I'm using the exact same query just remote. running it on an on-prem QRadar local and remote we get all the fields just qroc that is limiting it. Any idea as to why this is happening?

     

    Sample query - powerbi:

    = Json.Document(Web.Contents("https://console-00506.qradar.ibmcloud.com/api/config/event_sources/log_source_management/log_sources?filter=target_event_collector_id%omitted", [Headers=[SEC="omitted", Version="16.0", Accept="application/json"]]))

     



    ------------------------------
    Terrence Tuwe
    ------------------------------