List of Contributions

Chris Collins

Contact Details

My Content

1 to 6 of 6 total
Posted By Chris Collins Mon January 10, 2022 09:45 AM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Peter, Regarding: Error: An error occurred that represents an exception for the Microsoft Azure Storage Service. There may be more errors either in the debug logs of the test, if you hit the gear icon in the top right of the Log Source Management app and toggle the debug option on you'll ...
Posted By Chris Collins Thu October 10, 2019 01:55 PM
Found In Egroup: IBM Security QRadar
\ view thread
Looks like there may be a bug in the DSM editor regex validation with some specific escape sequences that should be fixed in a future release. You can try this instead: Oct 4 15:42:03 mx2 bmserver[2537]: 1570189323|50538744-c7fff70000000aff-82-5d97300b77b1|VERDICT|test@test.com|none|default|default ...
Posted By Chris Collins Thu October 10, 2019 01:24 PM
Found In Egroup: IBM Security QRadar
\ view thread
So if you're getting this back Response from query attempt was not 200, response: 400: Bad Request That's why the response is null, so we'd need to troubleshoot why that query is failing. 400 is a bad request so Salesforce API is saying our request is malformed. Some quick digging says it ...
Posted By Chris Collins Thu October 10, 2019 08:40 AM
Found In Egroup: IBM Security QRadar
\ view thread
The regex is definitely fine, it's even showing in the preview. I'll check into it and get back to you ASAP. ------------------------------ Chris Collins ------------------------------
Posted By Chris Collins Wed October 09, 2019 11:49 AM
Found In Egroup: IBM Security QRadar
\ view thread
Presuming that bmserver and ecelerity processes are sending data in different formats (since the username follows the eventId in the former and the IP/port in the latter) here's some you could try. ================================== Oct 4 15:42:03 mx2 bmserver[2537]: 1570189323|50538744-c7fff ...
Posted By Chris Collins Tue October 08, 2019 09:58 PM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Troy, Can you be more specific about what you feel is broken in the Azure Event Hub Protocol? We are working on various improvements but the current version in the field is working well for many customers - I'd hate for @nati nakache to think things are just completely broken and that they should ...