IBM QRadar SIEM
by IBM
Security information and event management for log correlation and offense tracking.
- Category
- IT, Security & Monitoring
- Type
- SIEM & security analytics
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- API key, Username and password
02Data
What you can sync.
- Offenses
- Events
- Flows
- Assets
- Reference data
Keep IBM QRadar SIEM offenses in your own Lake, on your servers, and report on it with the rest of IT.
Need more? Name any other IBM QRadar SIEM data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- An API key
- A username and password
IBM QRadar SIEM uses an API key or a username and password. You add the credentials once, when the AI asks for them, and it tells you where to create them in IBM if you need help.
04How it works
How it works in DataMind.
-
Pick IBM QRadar SIEM.
Open Lake, pick IBM QRadar SIEM in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the IBM QRadar SIEM API docs.
-
Answer a few questions.
The AI reads the IBM QRadar SIEM documentation, then asks which credentials you will use, which data to sync (for example offenses and events), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then IBM QRadar SIEM data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.