Adding an email server

IBM® QRadar® uses an email server to distribute alerts, reports, notifications, and event messages.

About this task

You can configure an email server for your entire QRadar deployment, or multiple email servers.

Important: QRadar only supports encryption for the email server using STARTTLS.
Important: If you configure the mail server setting for a host as localhost, then the mail messages don't leave that host.

Procedure

  1. On the Admin tab, click Email Server Management.
  2. Click Add, and configure the parameters for your email server.
  3. Click Save.
    Tip: Keep the TLS option set to On to send encrypted email. Sending encrypted email requires an external TLS certificate. For more information, see Importing external TLS certificates.
  4. To edit the port for an email server, click the Other Settings (Other Settings) icon for the server, enter the port number in the Port field, and then click Save.
  5. To delete an email server, click the Other Settings icon for the server, and then click Delete.
  6. After you configure an email server, you can assign it to one or more hosts.
    1. On the System and License Management page, select a host.
    2. Change the Display list to show Systems.
    3. Click Actions > View and Manage System.
    4. On the Email Server tab, select an email server and click Save.
    5. Test the connection to the email server by clicking the Test Connection button.
    6. Click Save.

What to do next

Importing external TLS certificates