IBM Security QRadar EDR REST API data source parameters for QRadar EDR
Add an IBM® Security QRadar® EDR log source that uses the IBM Security QRadar EDR REST API protocol in IBM QRadar.
When you use the IBM Security QRadar EDR REST API protocol, there are specific parameters that you must configure.
The following table describes the parameters that require specific values to collectIBM Security
QRadar EDR REST API events from QRadar EDR.
Parameter | Value |
---|---|
Log source type | IBM Security QRadar EDR |
Protocol Configuration | IBM Security QRadar EDR REST API |
Log source identifier | The Log source identifier must match the server address or the server name of the QRadar EDR hive. |
Server Address |
The IP or hostname of the QRadar EDR server. |
App ID |
The App ID value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar. |
Secret Key |
The Secret Key value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar. |
Full a complete list of IBM Security QRadar EDR REST API protocol parameters and their values, see IBM Security QRadar EDR REST API protocol.