Integration with QRadar when QRadar cannot get updates
Integration with QRadar when QRadar cannot get updates
August 22, 2024
ID 167589
If it is not possible to get the latest QRadar updates, use the configuration procedure below.
To use QRadar with Kaspersky CyberTrace Service if QRadar cannot be updated:
- Import new QRadar identifiers to QRadar.
- Add Kaspersky CyberTrace Service as a log source for QRadar.
- Map Kaspersky CyberTrace Service events to QRadar identifiers.
- Specify the log source type.
- Perform the verification test.
- (optional) Perform all steps from the following instructions: Configure QRadar to display custom fields of events.
- (optional) Perform all steps from the following instructions: Configure QRadar to display events in a dashboard.
After you have successfully integrated Kaspersky CyberTrace with QRadar, install Kaspersky CyberTrace App for QRadar.
Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.