IBM Support

QRadar Advisor with Watson: Upcoming changes to the machine learning model (12 July 2023)

News


Abstract

The QRadar Advisor with Watson app is updating the data sources used by AI and Machine Learning (ML) models on 12 July 2023 to remove an open-source content enrichment feed for the Watson Discovery Service (WDS). For users, the removal of the Watson Discovery Service is not expected to reduce data quality. This notification is intended to inform users of upcoming dates and that no administrator actions are required in the QRadar Advisor with Watson application.

Content

Technical note updates


  • 10 June 2023: Initial notice provided to inform users to upcoming changes to the data sources used by AI and Machine Learning (ML) model.
  • 10 July 2023: Second notice sent to users to inform them of the pending data source changes.

About this change

IBM is announcing changes to the data services in the QRadar Advisor application to remove Watson Discovery Services (WDS) from the QRadar Advisor application. The custom AI and Machine Learning models developed by IBM are still in place in the QRadar Advisor application, but the application no longer requires overlapping open source cybersecurity data from multiple sources.
Key Dates
  • First notice sent to users: 10 June 2023
  • Secondary notice: 10 July 2023
  • Watson Discovery Service (WDS) data source deprecation: 12 July 2023
Key points
  1. Watson investigations use custom AI and ML modules to enrich offense data from QRadar, but the application is deprecating overlapping open source data from Watson Discovery Service (WDS) servers. 
  2. Watson Insights and full cloud analysis of offense data is provided through multiple cybersecurity data sources in IBM Cloud.
  3. No application settings changes are required. As this change removes an overlapping data source, there is no need for administrators to reset the training models within the QRadar Advisor application.
  4. Administrators are not required to update the application version from the X-Force App Exchange to remove the overlapping data source.
  5. No firewall changes are required by administrators as the changes to the data sources are made in IBM Cloud.
 

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSDG3M","label":"IBM QRadar Advisor with Watson"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSKMKU","label":"IBM QRadar on Cloud"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
10 July 2023

UID

ibm16998395