List of Contributions

Chris Collins

Contact Details

My Content

1 to 5 of 5 total
Posted By Chris Collins Oct 10, 2019 1:55 PM
Found In Egroup: IBM Security QRadar
\ view thread
Looks like there may be a bug in the DSM editor regex validation with some specific escape sequences that should be fixed in a future release. You can try this instead: <142>Oct 4 15:42:03 mx2 bmserver[2537]: 1570189323|50538744-c7fff70000000aff-82-5d97300b77b1|VERDICT| test@test.com |none|default|default ...
Posted By Chris Collins Oct 10, 2019 1:24 PM
Found In Egroup: IBM Security QRadar
\ view thread
So if you're getting this back Response from query attempt was not 200, response: 400: Bad Request That's why the response is null, so we'd need to troubleshoot why that query is failing. 400 is a bad request so Salesforce API is saying our request is malformed. Some quick digging says it may ...
Posted By Chris Collins Oct 10, 2019 8:40 AM
Found In Egroup: IBM Security QRadar
\ view thread
The regex is definitely fine, it's even showing in the preview. I'll check into it and get back to you ASAP. ------------------------------ Chris Collins ------------------------------
Posted By Chris Collins Oct 9, 2019 11:49 AM
Found In Egroup: IBM Security QRadar
\ view thread
Presuming that bmserver and ecelerity processes are sending data in different formats (since the username follows the eventId in the former and the IP/port in the latter) here's some you could try. ================================== <142>Oct 4 15:42:03 mx2 bmserver[2537]: 1570189323|50538744- ...
Posted By Chris Collins Oct 8, 2019 9:58 PM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Troy, Can you be more specific about what you feel is broken in the Azure Event Hub Protocol? We are working on various improvements but the current version in the field is working well for many customers - I'd hate for @nati nakache to think things are just completely broken and that they should ...