IBM Security QRadar

 View Only

  • 1.  Identify new asset in the network

    Posted Tue April 05, 2022 08:33 AM
    Hi guys, how can i make a rule to alert me when a new asset is added in my network. I mean if a PC is connected to my network an alert to be sent via mail to me? Thank you

    ------------------------------
    Slavcho Andreevski
    ------------------------------


  • 2.  RE: Identify new asset in the network

    Posted Mon April 18, 2022 06:40 AM
    anyone? 0_o

    ------------------------------
    Slavcho Andreevski
    ------------------------------

    Original Message


  • 3.  RE: Identify new asset in the network

    Posted Tue April 19, 2022 10:25 AM
    Something like this maybe (event rule):
    You also have to specify mail server in Admin > Email Server Management.

    If rule triggers too often, you can also enable Response Limiter.

    Also, you can create custom email template if you don't like default one: https://www.ibm.com/docs/en/qsip/7.4?topic=notifications-configuring-custom-offense-email.

    Hope this helps.


    ------------------------------
    Nikola Nikolić
    ------------------------------

    Original Message


  • 4.  RE: Identify new asset in the network

    Posted Wed June 01, 2022 05:40 AM
    Thank for the reply.. I will try it and let you know if it works :D

    ------------------------------
    Slavcho Andreevski
    ------------------------------

    Original Message