IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Remote Destination IPs to SOAR

  • 1.  Remote Destination IPs to SOAR

    Posted Mon November 08, 2021 05:05 AM
    Dear all, 

    We have integrated IBM SIEM with SOAR, When we send an incident to SOAR is only displays Local Source IP, Local destination IP and user name, It is not showing remote destination IP.  It it possible to fetch remote destination IP via API calls? Or any app that can help would be helpful

    Thankyou. 


    ------------------------------
    Mohsin Ali
    ------------------------------