In the bustling city of CodeTown, lived Laura, a passionate application developer known for crafting ingenious solutions. Laura's journey had been one of visual elegance, thanks to the QRadar App Editor. With its low code interface, Laura could weave intricate designs into applications that made life simpler for the QRadar residents.
But one day, as Laura gazed out of window, a thought emerged: what if the applications could evolve beyond their current forms? What if she could do a lot more customisation, show the magic of her coding skills? The answer lies in QRadar App SDK.
Let’s guide Laura to migrate the cool QRadar apps built by her from App Editor to SDK. In case you are one of Laura follow the blog to complete your journey :).
1. 1. Export the application from the App Editor
a. In the development tab for the application click on Actions > Export App > As Zip.
b. When prompted, type the version of the exported app.
Note: If you do not provide a version, the exported application is set with a default version of 1.0.0.
c. Click Export App.
2. 2. Install the latest QRadar App SDK
3. Read the documentation provided with the App SDK
To view the documentation for the App SDK at any time after installing the App SDK you can type the following command.
qapp -d
As stated in the documentation there are two steps to run an application locally:
1. a. Build an application image, if one does not already exist.
b. b. Run a container using the application image.
4. Build an application image for the application using the App SDK
- Extract the application zip file you exported from the App Editor in step 1.
- Navigate to the folder with the extracted contents of the zip file.
- To build a docker image from your extracted application zip file, type . qapp build
5. Run a container using the application image
Type the following command to run the application in docker locally:
qapp run
Note: The output supplies the location of the endpoints for your app, for example, http://localhost:64104
. You can navigate to this endpoint in your browser to see your app run locally in docker.
Results
The application is successfully exported from the IBM App Editor. If you have multiple applications that you developed with the App Editor repeat the process above for each app. You can then edit the app(s) normally using the functions as outlined in the App SDK documentation and uninstall the IBM App Editor from QRadar.
In CodeTown, and beyond, developers like Laura are crafting the future – a future where each choice became a stepping stone to a realm of limitless creation.
Looking for more QRadar Security Content, you can find the complete list of blog entries here.