IBM QRadar

 View Only
  • 1.  Event QID - Rules

    Posted Sat November 05, 2022 11:46 PM
    Good evening,

    I would like to know if I can setup two or more QIDs in a rule, Is it possible to do that ??


    Thanks


    BR
    LRS

    ------------------------------
    Lenin Ramírez
    ------------------------------


  • 2.  RE: Event QID - Rules

    Posted Mon November 07, 2022 06:14 AM
    here you go


    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



  • 3.  RE: Event QID - Rules

    Posted Mon November 07, 2022 06:28 AM
    Hi Lenin,

    If i understand it correctly.  Yes, you can call more than one QID in a rule or building block criteria. 


    Regards,
    Jaswinder


    ------------------------------
    Jaswinder Singh
    ------------------------------