Configuring QRadar to pull events from IBM Security Verify

To send JSON events to QRadar® by using the REST API, you must create an API Client for the QRadar system that connects to the IBM® Security Verify service.

Procedure

  1. Ensure that you can access your IBM Security Verify tenant's administrative portal.
  2. Complete the steps to generate credentials for use with the REST API in IBM Security Verify. For more information about the Getting Credentials procedure, see Getting Started (https://www.ibm.com/blogs/security-identity-access/getting-started-with-ibm-cloud-identity-rest-apis/).
    Important: Record the Client ID and Client Secret values from the Getting Credentials procedure in Step 2. You need these values when you add a log source in QRadar.
  3. Ensure that the API Client you use for the IBM Security Verify Event Service protocol has Read reports or Manage reports access permission.

What to do next

Adding a log source