List of Contributions

David Joshua Edithi

This individual is no longer active. Application functionality related to this individual is limited.

Contact Details

My Content

1 to 20 of 22 total
Posted By David Joshua Edithi Wed April 17, 2019 04:05 AM
Found In Egroup: IBM Security QRadar
\ view thread
​Hi @Anthony Gayadeen Thanks for the detailed suggestion. For Secondary appliance we have actually tried to perform the first suggested way. Rebuild the secondary appliance with activation key of 1629, however it gave us an error when entered the activation key saying that the activation key is invalid ...
Posted By David Joshua Edithi Tue April 16, 2019 10:51 AM
Found In Egroup: IBM Security QRadar
\ view thread
------------------------------ Thanks and Regards David Joshua Edithi ------------------------------
Posted By David Joshua Edithi Tue April 16, 2019 09:12 AM
Found In Egroup: IBM Security QRadar
\ view thread
​The issue here we are seeing is that after adding the /etc/fstab entry in secondary appliance. Now the server doesnot respond to df -h. Can perform cd to directories by unable to list (ls) anything from /store directory. ------------------------------ Thanks and Regards David Joshua Edithi -- ...
Posted By David Joshua Edithi Tue April 16, 2019 08:12 AM
Found In Egroup: IBM Security QRadar
\ view thread
​We have event processors in HA mode. We have mounted an external storage onto the primary server by adding the entry under /etc/fstab. The storage is accessible from primary. But when a fail over happened and the secondary server is active, the storage partition is not visible under secondary server. ...
Posted By David Joshua Edithi Sun April 07, 2019 06:38 AM
Found In Egroup: IBM Security QRadar
\ view thread
​Hi @Ibrahim Najmi This is a software installation, we have installed QRadar software on a server which has specs that support both 1624 and 1629. Currently the appliance type is 1624, so I want to change the appliance type to 1629. Thanks David Joshua Edithi​ ------------------------------ ...
Posted By David Joshua Edithi Fri April 05, 2019 12:04 PM
Found In Egroup: IBM Security QRadar
\ view thread
Hi @Anthony Gayadeen Thanks for the details provided. The reason i was thinking that we can re-build and change the appliance type to 1629 from 1624 is because we already have similar hardware that is being using as 1629 appliance type. Hence, was thinking for the other appliance as well we would ...
Posted By David Joshua Edithi Thu April 04, 2019 01:39 AM
Found In Egroup: IBM Security QRadar
\ view thread
Hi @Nico de Smidt Thanks for your response. Yes, the existing appliances support 1629 type and i believe activation key is the one that defines the appliance type during installation. So, ideally we have the box that support 1629 and if we have the activation key for 1629 this should be possible right. ...
Posted By David Joshua Edithi Wed April 03, 2019 10:13 AM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Team, I have one query here with regards to Appliance Type Change in a HA environment. Not sure if this is correct forum to post this query, however here is the scenario and i would need some recommendation here. Our current setup has Event Collector/Processors in HA with Appliance Type 1624 ...
Posted By David Joshua Edithi Tue March 12, 2019 11:26 PM
Found In Egroup: IBM Security QRadar
\ view thread
Hi Team, Can someone help here with a confirmation that if Master Console is supported in QRadar 7.3.1 version. As the document related to Master Console mentions not to install the Master Console component on 7.3.1. Kindly assist. #MasterConsole #QRadar
Posted By David Joshua Edithi Sun March 10, 2019 04:22 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi @Shane Curtin, Thanks a lot for the detailed explanation. I tried to replicate the same as recommended, however i am getting few errors. Kindly suggest what i am missing here. Modified app.config file as below: ​[test] queue=test user=useraccount secret=^key Modified the python code ...
Posted By David Joshua Edithi Wed March 06, 2019 10:38 PM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi @Shane Curtin, Thanks for your response. I have refereed ​the document, this talks about how to setup Key Ring. Which is already done in our environment. However, my question is after setting up the credentials into Keyring component, how do i make sure that my script uses those values that ...
Posted By David Joshua Edithi Wed March 06, 2019 03:10 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi @Can Topay, Thanks for the suggestions. Any idea if we have a reference document on what all tags/components are allowed under html block for resilient, so that i can refer ​for future use. ------------------------------ Thanks and Regards David Joshua Edithi ------------------------- ...
Posted By David Joshua Edithi Wed March 06, 2019 03:06 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Can someone help me here with the keyring component. I have a custom script which i am executing using the Resilient Circuits and Message Destination. Within this code currently we are passing the username and password (hard coded), but now we want to use the keyring component to have the username ...
Posted By David Joshua Edithi Wed March 06, 2019 12:18 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi @Jared Fagel, Thanks a lot for your response. Firstly, the Workflow and Rule should be of what object type ? Ideally i believe, it should be on Attachment Type.​ But when i use the Object Type as Attachment i am getting an error that artifact is unknown. So, i tried using the Object Type as ...
Posted By David Joshua Edithi Tue March 05, 2019 03:25 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
https://exchange.xforce.ibmcloud.com/hub/extension/5bc5472251e3928ff43a4c902b6c57aa IOC Parser Functions for Resilient, we are unable to run the mentioned app. Have installed it successfully and app.config, functions are updated. I have created a workflow and rule to use this function. However, no ...
Posted By David Joshua Edithi Tue February 26, 2019 03:52 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Dear @Can Topay, Thanks a lot for the help, its working now. I have one question here, doesnot Resilient allow the alignment ​of these Images or Headers ? Can you please confirm. ------------------------------ Thanks and Regards David Joshua Edithi ------------------------------
Posted By David Joshua Edithi Sun February 24, 2019 12:06 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi @CRAIG R Thanks for the details. I have refereed to this previously.​ However, i want to load this image locally from my Resilient server and not from any internet web URL. Can you please suggest on the HTML block i can use to have this addressed. ------------------------------ Thanks and Regards ...
Posted By David Joshua Edithi Sun February 17, 2019 12:51 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi Team, Is there any guide or tutorials for best way to use HTML Block option in Resilient ? I am expecting it to very simple HTML code, however I am having few challenges in making few required additions to the HTML block. One such example is, i wanted to add an Image under the HTML block. I ...
Posted By David Joshua Edithi Thu February 07, 2019 06:12 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Thanks for the suggestion, got this thing working now. However, if we can do the same via a remote CSV that should be a good option as well. ------------------------------ David Joshua Edithi Cyber Security Engineer Starlink Dubai ------------------------------
Posted By David Joshua Edithi Thu February 07, 2019 05:32 AM
Found In Egroup: IBM Security QRadar SOAR
\ view thread
Hi Pablo, Thanks for your suggestion. Can we use this to post the output to a Field instead of Data Table. As we would need to populate a field with the Risk Rating of the asset that is present in the Artifact. Currently i have installed the Wiki app, added a page with IP Address, Hostname, ...