IBM Security QRadar EDR REST API data source parameters for QRadar EDR

Add an IBM® Security QRadar® EDR log source that uses the IBM Security QRadar EDR REST API protocol in IBM QRadar.

When you use the IBM Security QRadar EDR REST API protocol, there are specific parameters that you must configure.

The following table describes the parameters that require specific values to collectIBM Security QRadar EDR REST API events from QRadar EDR.

Table 1. IBM Security QRadar EDR REST API protocol parameters for the IBM Security QRadar EDR DSM
Parameter	Value
Log source type	IBM Security QRadar EDR
Protocol Configuration	IBM Security QRadar EDR REST API
Log source identifier	The Log source identifier must match the server address or the server name of the QRadar EDR hive.
Server Address	The IP or hostname of the QRadar EDR server.
App ID	The App ID value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar.
Secret Key	The Secret Key value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar.

Full a complete list of IBM Security QRadar EDR REST API protocol parameters and their values, see IBM Security QRadar EDR REST API protocol.