Configuring the Investigation Assistant app

Edit online

An Admin user must configure certain properties to enable the Investigation Assistant app in your QRadar environment.

Before you begin

Important: You must have a watsonx™ subscription and a watsonx project to use the Investigation Assistant app.
Complete the following steps before you configure the Investigation Assistant in your QRadar environment.
  1. Signing up for IBM watsonx
  2. Creating IBM watsonx project
  3. Creating IBM watsonx API Key

Procedure

  1. On the navigation menu ( Navigation menu icon ), click Admin.
  2. In the Admin tab, click watsonx.ai Configuration.
  3. On the IBM QRadar Investigation Assistant config page, enter the following information:
    Table 1. Configuration parameters for the Investigation Assistant app
    Parameter Description
    Project ID The project ID for corresponding project in watsonx.
    API key A 44 character key to authenticate and authorize programmatic access to watsonx resources and services.
    Region The region where your watsonx data and services are hosted.
    AI Model AI Model.
  4. Click Submit. A connection test will run. If the submit is successful, the specified configuration works and can connect to the WatsonX.AI platform.
  5. Optional: Click Test Connection to verify that your existing configuration still connects to the WatsonX.AI platform.

What to do next

Use the Investigation Assistant to investigate an offense and see potential next steps.