IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SOAR - usage and value

    Posted 2 days ago

    Guys, I need to be able to get some report on SOAR usage.

    I know I could get something from System Settings --> License Information. But what I need is to identify the playbooks used in specific incidents.

    I know I could get information from Playbooks --> Playbooks Instances. But I can't see incident details or filter by incident type.

    I tried using the API and couldn't!

    Any suggestions?

    Has anyone experienced the need to be able to show and justify the use of SOAR to the CISO?



    ------------------------------
    Juan Cruz Del Col
    ------------------------------


  • 2.  RE: SOAR - usage and value

    Posted 16 hours ago

    Soar isn't just about playbooks.

    How about some reports from the analytics dashboard showing incidents closed over time by type etc ?

    The playbook instances do show most used playbooks to highlight that side of soar.



    ------------------------------
    Martin Feeney
    Product Manager, IBM Security QRadar SOAR
    martin.feeney@ie.ibm.com
    ------------------------------

    Original Message


Related Content