Editing threat intelligence feeds

You can edit the threat intelligence feeds that exist in the IBM® QRadar® UI.

Procedure

  1. On the Threat Intelligence page, click Edit for the feed you want to change.
  2. On the Edit a TAXII Feed page, enter your Password. Make your changes, such as uploading a client certificate or client key, and click Discover.
  3. On the Parameters tab, make your changes and click Next through each configuration page until you get to the end of the wizard.
    Note: If you plan to change the reference set or the collection in the Parameters tab, these changes affect only polling that is run going forward from the date of the edit. Data from previous polling isn't affected. In this case, create a new threat feed instead.
  4. Click Save, and close the Threat Intelligence page.
  5. On the Admin tab, click Deploy Changes.