Topic
  • 1 reply
  • Latest Post - ‏2016-09-21T17:55:01Z by HasanGenc
AntonPuz
AntonPuz
1 Post

Pinned topic AQL query to select by rule group

‏2016-03-09T10:32:01Z |

Hello,

 

I am looking for a method to be able to query QRadar for events which matched any rule from a rule group.

I found only matching for exact rule and partially match rules.

 

Anyone known if and how it might be achieved?

  • HasanGenc
    HasanGenc
    3 Posts

    Re: AQL query to select by rule group

    ‏2016-09-21T17:55:01Z  

    Hello,

    This case is not resolved or searched according to AQL documentation. However, I have been looking for this property searching and any group offense count on daily for reporting over QRadar.

    I am glad if there is any way or solution and is shared with us? Thanks in advance