IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Event QID - Rules

    Posted Sat November 05, 2022 11:46 PM
    Good evening,

    I would like to know if I can setup two or more QIDs in a rule, Is it possible to do that ??


    Thanks


    BR
    LRS

    ------------------------------
    Lenin Ramírez
    ------------------------------


  • 2.  RE: Event QID - Rules

    Posted Mon November 07, 2022 06:14 AM
    here you go


    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


  • 3.  RE: Event QID - Rules

    Posted Mon November 07, 2022 06:28 AM
    Hi Lenin,

    If i understand it correctly.  Yes, you can call more than one QID in a rule or building block criteria. 


    Regards,
    Jaswinder

    ------------------------------
    Jaswinder Singh
    ------------------------------

    Original Message