IBM Support

QRadar: Why does a custom QID not work for Cisco WLC DSM in log activity?

Question & Answer


Question

Why does a custom QID work in the DSM editor, but not work in log activity for Cisco WLC DSM?  

Answer

When creating a QID for Cisco WLC DSM, also create the same QID for the Cisco WISM DSM. There is an interdependency between the two DSMs that require the same QIDs to be in both DSMs for it to work properly.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwtEAAQ","label":"Log Activity"}],"ARM Case Number":"TS016757692","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
22 July 2024

UID

ibm17160943