Create profiles for ingesting IBM QRadar offenses

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • You can set up a profile to ingest offenses.

    Before you begin

    Role required: sn_si.admin

    Procedure

    1. To create a profile for an offense in your ServiceNow AI Platform instance, navigate to IBM QRadar Integration > IBM QRadar Profile.
    2. Click New.
    3. Fill in the fields.

      An example of a completed form follows the table.

      Table 1.
      Field Description
      Name Unique name for the profile. If names are not unique, an error will be displayed and duplicate profile names are not saved.

      Profile names in your ServiceNow AI Platform instance must be unique.
      Active Check box is cleared by default. If this option is disabled, the profile is not active and ingestion will not take place.
      Note:
      You should complete all sections in the profile before making it active.
      Source The IBM QRadar server that you configured to ingest offenses. If you have multiple IBM QRadar servers configured, select the appropriate server for the offense types that will be ingested for the profile. You are required to enter a value.
      Order Default is 100.

      If you have created multiple profiles, this value provides a run time execution priority when two or more profiles share the same triggering conditions. The workflow in the profile with the lowest number has the highest priority.
      (Optional) Description Additional text to help you distinguish this profile from other profiles.
      The following figure is an example of a completed form.
      IBM QRadar: Create Profile: Name

    What to do next

    The next step is to select the offenses for ingestion.