IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Qradar SNMP Heartbeat

    Posted Tue March 23, 2021 01:09 PM

    We have an 7.4.2 QRadar installation which currently is set up to send snmp traps to an Omnibus-installation.

    I would like to expand this to a heartbeat-function, so if the Omnibus doesn't recieve a specific trap in x amount of time (for instance, each 15min) it raises an alarm.

    Is there some way I can configure or customize QRadar to send a custom trap at a given interval, rather than as a response to an event or offense?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Qradar SNMP Heartbeat

    Posted Wed March 24, 2021 01:50 AM

    Hello Lars,

    QRadar is not officially supported for sending snmp traps from OS to outside of box.

    This below link is official support for sending SNMP Trap by QRadar Rule response.

    https://www.ibm.com/support/knowledgecenter/SS42VS_7.4/com.ibm.qradar.doc/c_qradar_adm_snmp_config.html

    You may config in RHEL OS Side but which is tune of the QRadar Box.

    <How to send snmp traps for monitoring CPU, disk and Memory?>

    https://access.redhat.com/solutions/3808261

    Regards, Brian



    #QRadar
    #Support
    #SupportMigration