You can edit the threat intelligence feeds that exist in the IBM®
QRadar® UI.
Procedure
-
On the Threat Intelligence page, click Edit for
the feed you want to change.
-
On the Edit a TAXII Feed page, enter your Password.
Make your changes, such as uploading a client certificate or client key, and click
Discover.
-
On the Parameters tab, make your changes and click
Next through each configuration page until you get to the end of the
wizard.
Note: If you plan to change the reference set or the collection in the
Parameters tab, these changes affect only polling that is run going forward
from the date of the edit. Data from previous polling isn't affected. In this case, create a new
threat feed instead.
-
Click Save, and close the Threat Intelligence
page.
-
On the Admin tab, click Deploy Changes.