News
Abstract
The Forward Alerts feature in IBM QRadar EDR is going to be discontinued
Content
As of June 30, 2024, legacy ReaQta (now QRadar EDR) will no longer support the Forward Alerts feature. QRadar EDR on-premise, running on the Openshift Container Platform, does not support Forward Alerts so is not impacted.
Option 1
If you are an IBM QRadar SIEM customer you can configure the IBM QRadar EDR DSM on your QRadar deployment as an alternative.
Option 2
If you are using a 3rd party SIEM the QRadar EDR Alerts Public REST API can be consumed to ingest Alerts. See below for more information:
QRadar EDR (formerly ReaQta): ReaQta Hive API for alerts
QRadar EDR (formerly ReaQta): Authentication of API client
QRadar EDR (formerly ReaQta): Creating API applications from Hive Server Dashboard
Option 1
If you are an IBM QRadar SIEM customer you can configure the IBM QRadar EDR DSM on your QRadar deployment as an alternative.
Option 2
If you are using a 3rd party SIEM the QRadar EDR Alerts Public REST API can be consumed to ingest Alerts. See below for more information:
QRadar EDR (formerly ReaQta): ReaQta Hive API for alerts
QRadar EDR (formerly ReaQta): Authentication of API client
QRadar EDR (formerly ReaQta): Creating API applications from Hive Server Dashboard
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSVOEH","label":"IBM Security ReaQta"},"ARM Category":[{"code":"a8m3p000000hBSAAA2","label":"Administrative Tasks"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
24 June 2024
UID
ibm17107690