IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Integration Between IBM QRadar and Bitsight - Cyber Risk Management Solutions

  • 1.  Integration Between IBM QRadar and Bitsight - Cyber Risk Management Solutions

    Posted Mon February 12, 2024 10:10 AM

    Hi Everyone,

    My name is Nara and I am from Indonesia. I have questions regarding integration between IBM QRadar and Bitsight - a Cyber Risk Management Solutions. But first, let me tell you the background of my questions.

    I need to do integration between IBM QRadar and Bitsight, where QRadar will be fetching data from Bitsight and create one Dashboard inside QRadar specifically for Bitsight and then I can show all Bitsight data from QRadar Dashboard. From what I know, to do integration between QRadar and Bitsight I need to use API Integration. I am not familiar with QRadar and API Integration because this is new experience for me but I already try to setup IBM QRadar Security Intelligence - Community Edition in my lab environment and I already generate Bitsight API Token from my Bitsight Dashboard.

    Here's are my questions:

    1. What is needed to configure from QRadar side?
    2. Where do I put API Command Line Request in the QRadar? Any Guidelines?

    Does anyone have experiences to do integration using API? If someone does experiences in using API for integration (or specifically integration to Bitsight), do you mind to share some guideline? Thank you so much for your help.

    Best Regards,

    Nara.



    ------------------------------
    Narapatya Dhiyaskara
    ------------------------------


  • 2.  RE: Integration Between IBM QRadar and Bitsight - Cyber Risk Management Solutions

    Posted Mon February 12, 2024 10:33 AM

    Hi Nara,

    QRadar currently does not have an integration for Bitsight.  You may be able to use the Universal Cloud API protocol to gather events from Bitsight

    https://www.ibm.com/docs/en/dsm?topic=configuration-universal-cloud-rest-api-protocol

    You will also have to create a Custom DSM to have the events parsed as one currently doesn't exist for QRadar

    https://www.ibm.com/support/pages/creating-custom-dsm-0

    You can open an IBM Idea to have this type of endpoint supported

    https://www.ibm.com/support/pages/qradar-requesting-new-features-ibm-ideas

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------

    Original Message


Related Content