IBM Security QRadar EDR REST API data source parameters for QRadar EDR

Add an IBM® Security QRadar® EDR log source that uses the IBM Security QRadar EDR REST API protocol in IBM QRadar.

When you use the IBM Security QRadar EDR REST API protocol, there are specific parameters that you must configure.

The following table describes the parameters that require specific values to collectIBM Security QRadar EDR REST API events from QRadar EDR.

Table 1. IBM Security QRadar EDR REST API protocol parameters for the IBM Security QRadar EDR DSM
Parameter	Value
Log source type	IBM Security QRadar EDR
Protocol Configuration	IBM Security QRadar EDR REST API
Log source identifier	The Log source identifier can be any valid value and does not need to reference a specific server. It can also be the same value as the Log Source Name. If you have more than one configured IBM Security QRadar EDR REST API data source, ensure that you give each one a unique name.
Server Address	The IP or hostname of the QRadar EDR server.
App ID	The App ID value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar.
Secret Key	The Secret Key value that you saved when you completed the Configuring QRadar EDR to communicate with QRadar.

Full a complete list of IBM Security QRadar EDR REST API protocol parameters and their values, see IBM Security QRadar EDR REST API protocol.