What's new in QRadar Analyst Workflow

Learn about new features and capabilities that make it easier for you to monitor offenses in QRadar Analyst Workflow.

Version 3.0

What's New

  • Search Page enhancements:
    • Added the Custom Preset option.
    • Increased the Log Source threshold limit.
    • Increased the Domain field threshold limit.
  • Added the integration with user based themes.

Resolved issues

  • Fixed an issue that caused QRadar Analyst Workflow to crash after you select magnitude, credibility and direction.
  • Fixed a search page issue that caused unnecessary capsule of AND after you apply filters.
  • Fixed an issue that caused the filter panel to hang during loading when your search has no results.

Version 2.34.0

What's New

  • You can now customize QRadar Analyst Workflow themes, including Light, Dark, or QRadar Default.

Resolved issues

  • Updated packages to address known vulnerabilities.
  • Fixed a filter issue on the Offense page.

Version 2.33.1

What's New

  • Upgraded the base image to v4 from v2.
  • QRadar Analyst Workflow is now compliant with Federal Information Security Modernization Act (FISMA).
  • Upgraded Next.js to v14 from v12.
  • You can now group event or flow drill-downs with a single click.

Resolved issues

  • Updated packages to address known vulnerabilities.

Version 2.33.0

What's New

  • Enhanced search query: You can now specify an exact match to search for events and flows.
  • Preview Results: On the Search page, you can now view 10 preloaded search results before the search is complete.
  • Offense Visual Builder: On the Offense page, you can now use a newly added visual builder to search for offenses by specifying fields.
  • Added Pulse app as a default dashboard.

Resolved issues

  • Updated packages to address known vulnerabilities.

Version 2.32.2

What's New

  • Fixed the data load issue on QRadar on Cloud.

Version 2.32.1

Resolved issues

QRadar Analyst Workflow 2.32.1 resolves the following known issues:

  • Fixed the search page issue when clicking View in log activity from UBA app.
  • Updated packages to address known vulnerabilities.

What's New

  • Open analyst workflow in QRadar Console tab - The two menu options Offense and Search are visible, and other menu options are not visible. The landing page is the Offense page.
  • When you click Try New UI, the Analyst workflow opens in a new tab. The landing page is the Pulse page if Pulse app is installed else it opens the Offense page.