Welcome users! Here you have an opportunity to collaborate directly with the product development teams and other product users.

Note: To submit enhancement requests for Analytics products please visit Analytics Ideas Portal site.

Existing enhancement requests for OpenPages, Incentive Compensation Management and Financial Transaction Manager products are moving to the Watson FSS Ideas Portal. Beginning March 25, 2019, visit WFSS Ideas Portal site to add a new enhancement request for these products. While we migrate to the new system, you can continue to review existing requests on this site, then you will be able to use the ID# for current enhancement requests to locate and subscribe to updates there.

Filter the page content by brand and product


This is a table showing requests
Number of votes Request headline and description

22
votes

Username Case Sensitivity

QRadar is unable to recognize a single username appearing in a different case format from other log sources as the same during event correlation.

Declined

IBM QRadar Security Information and Event Manager

18
votes

Expose the AQL query in Manage Search Results

Manage Search results - for searches run with filters set through the GUI, you can see the conditions of the search. For searches run via AQL, you only see the fields but never the query or the condit...

Under Consideration

IBM QRadar Security Information and Event Manager

15
votes

Proofpoint POD in JSON format

We are requesting that IBM integrate with Proofpoint POD (Proofpoint On Demand) in JSON format. The current syslog format for POD is not valuable within the SIEM due to Proofpoint logging across many ...

Under Consideration

IBM QRadar Integration (DSM, Scanners, Rules, Repo...

14
votes

Add ability to edit already set filters

If a filter for a search is once set, it cannot be edited. I always have to remove it and add it again. This is really annoying especially if the filter includes multiple entries (e.g. multiple IP add...

Under Consideration

IBM QRadar Security Information and Event Manager

13
votes

Prevent "debconf: (TERM is not set, so the dialog frontend is not usable.)"...

Depending on how the Ubuntu kernel patches are configured sometimes the apt-get poupop the message waiting interaction: debconf: unable to initialize frontend: Dialog debconf: (TERM is not set, so th...

Under Consideration

IBM BigFix Patch

12
votes

Modifying a search without having to re-enter all values

Add the ability to modify a search or quick search without having to re-enter all values or parameters again.

Planned for Future Release

IBM QRadar Security Information and Event Manager

11
votes

Generate Offences on Log Source Time

By default, QRadar uses the Start Time to process logs and generate Offences. I would like to change this to generate Offence based on the Log Source Time (the time in which logs were generated on the...

Uncommitted Candidate

IBM QRadar Security Information and Event Manager

11
votes

MITRE Attack Referenz for QRadar Rules

Compliance Requirements at QRadar customers need to document the compatibilty to MITRE Attack Framework. Suggestion is to extend the Rule Description with a hint which MITRE Attack Technique or APT wi...

Planned for Future Release

IBM QRadar Security Information and Event Manager

9
votes

Improving QRadar multi tenancy configuration and visibility

Today QRadar's configuration for multi tenancy is spread across the whole configuration part of QRadar. There're multi tenancy configuration options with retention buckets, resource restriction, secur...

Under Consideration

IBM QRadar Security Information and Event Manager

9
votes

UI management of reference maps, tables & maps of sets

Today only Ref Sets can be managed through the UI. Reference maps, tables & maps of sets can only be managed via the CLI or some cases API. All of the reference data should be manageable through the U...

Declined

IBM QRadar Security Information and Event Manager

8
votes

Develop fuzzy search using AQL

Develop the ability to use fuzzy searching within AQL similar to what is implemented in other products within Lucene (https://lucene.apache.org/core/7_3_0/core/org/apache/lucene/search/FuzzyQuery.html...

Under Consideration

IBM QRadar Security Information and Event Manager

8
votes

Nutanix AHV Support

We have several customers that have moved to Nutanix. Their plans are to use Nutanix Acropolis Hypervisor (AHV) rather than ESX or Hyper-V AHV is based on KVM so should be easy to support

Declined

IBM License Metric Tool (ILMT)

8
votes

ISAM: make RSA CLIENT_IP ...

Planned for Future Release

IBM Security Access Manager

7
votes

DSM Request For Airwatch MDM Syslog traffic.

Was forwarded here from this IBM post. https://www.ibm.com/developerworks/community/forums/html/topic?id=2f19085b-5178-4a39-a993-d27824a4e49b We have Airwatch MDM on a Windows Server and have a conf...

Declined

IBM QRadar Security Information and Event Manager

7
votes

Improvement Request for Bundle Export/Import via RestAPI

The recently-introduced export/import functionality through RestAPI for bundles seems to be cumbersome and somewhat unreliable for medium-sized & big environments with a lot of bundlings. We recently ...

Uncommitted Candidate

IBM BigFix Inventory


Your ideas matter!

As of today:

266 new
1498 planned
3820 delivered


6041 users
24120 votes
23553 comments