IBM Security QRadar

 View Only
  • 1.  Exporting Network Activity

    Posted Thu August 01, 2019 10:05 AM
    Greetings! Currently one of the projects i am working on is requiring data from Qradar's Network Activity Tab. I have gone through the API and it seems to not do what i need it to do. Has anyone been able to export the Network Activity in a systemic way? 

    The process right now is to manually export it which can take a few hours to complete but if we can get a live feed or a every 10 mins an update, that would work as well.

    ------------------------------
    Matthew Painter
    ------------------------------


  • 2.  RE: Exporting Network Activity

    Posted Fri August 16, 2019 09:08 PM
    have you tried setting up offline JSON forwarding ?

    https://www-01.ibm.com/support/docview.wss?uid=swg21978147

    ------------------------------
    Christopher Meenan
    ------------------------------