IBM Support

QRadar: Custom rule names for User Behavior Analytics

Question & Answer


Question

Can I modify rule names for rules delivered in the User Behavior Analytics (UBA) app?

Answer

At this time IBM does not support modifying the rule name for any of the rules delivered as part of the UBA app.
Changing the rule names results in errors when searching against use cases in UBA.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtrAAA","label":"Rules"}],"ARM Case Number":"TS016104653","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.0;and future releases"}]

Document Information

Modified date:
13 August 2024

UID

ibm17165372