IBM Security QRadar

 View Only
  • 1.  Offenses missing from my threat simulation in Qradar CE - am I missing anything ?

    Posted Mon December 05, 2022 07:37 AM

    I have a fresh installation of Qradar CE 7.3 and I have installed the QRadar Experience Center app in order to simulate threats and get a hand of things in practice. One thing I have noticed while running a simulation from the experience center tab, on the log activity page, is it does generates events in the main search page, but the offense association seems to be missing.

    The video tutorial also mentions I should see the offense sign in the first column, but nothing appears in my case. Any idea what may be missing from my installation ? Is there some additional configuration to perform ?

    Thanks in advance for your suggestions



    ------------------------------
    Guido
    ------------------------------


  • 2.  RE: Offenses missing from my threat simulation in Qradar CE - am I missing anything ?

    IBM Champion
    Posted Fri December 16, 2022 08:40 AM
    Pls apply the CE patch needed!

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



  • 3.  RE: Offenses missing from my threat simulation in Qradar CE - am I missing anything ?

    Posted Tue December 20, 2022 09:51 PM
    Hello Karl ! 
    Thank you for your reply !
    I have looked around, I am afraid I cannot find the aforementioned CE patch. (Also I was under the impression that Qradar QE cannot be patched/upgraded ?)
    May I have more details ?

    ------------------------------
    Guido Kaz
    ------------------------------



  • 4.  RE: Offenses missing from my threat simulation in Qradar CE - am I missing anything ?

    IBM Champion
    Posted Wed December 21, 2022 05:17 AM
    Guido if you Follow the CE Download path You will See  a red Button to the Patch that Needs to be Applied. BTW CE Allows for Manual fixes and Upgrade of DSM ans Protocols just Fixpacks cant be applied however 

    Gesendet von Outlook für iOS