IBM QRadar Offense Ingestion Integration

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • The IBM QRadar Offense Ingestion integration allows you to automatically fetch IBM QRadar offenses and convert them into security incidents and enable automated response actions.

    This integration supports the following:
    • Discovery of IBM QRadar offenses that are candidates for security incidents.
    • Fetching recent events or flows associated with an offense.
    • Track key updates to offenses periodically.
    • Mapping of offense, event, and flow fields to security incident fields.
    • Preliminary view of the mapped fields.
    • Setup scheduled ingestions of offenses to create security incidents periodically.
    • Close the offenses when the security incidents are closed.