IBM Security QRadar

Hi People
Hope you all are healty and safe

I cutomized the alert-config.xml file and added a new template and set that new template in the offense to send customized alert to a customer but Qradar is sending the alerts with the default template.
Someone have some idea why is this happening?

I executed the /opt/qradar/bin/runCustAlertValidator.sh script and did a full deploy in the console but it didn't work.

Thank You

------------------------------
Johan Lopez
------------------------------

Hi,
Is the <active></active> property set to True?
As documented:Important:
The <active></active> property must be set to True for each event and flow template type that you want to appear as an option in QRadar. You must also ensure that the <filename></filename> property is left empty.
Stay safe as well.
Thanks and Regards.
Sree

​

------------------------------
SREE ANANTHASAYANAM
------------------------------

Original Message:
Sent: Wed April 01, 2020 09:17 AM
From: Johan Lopez
Subject: Customized Email Template

Hi People
Hope you all are healty and safe

I cutomized the alert-config.xml file and added a new template and set that new template in the offense to send customized alert to a customer but Qradar is sending the alerts with the default template.
Someone have some idea why is this happening?

I executed the /opt/qradar/bin/runCustAlertValidator.sh script and did a full deploy in the console but it didn't work.

Thank You

------------------------------
Johan Lopez
------------------------------