Exporting and importing custom rule attributes

Export or import custom rule attribute data, including rule mappings, in a JSON file. Sharing the data between colleagues or QRadar® deployments helps to streamline your workflow by eliminating work effort.

Procedure

  1. To export custom rule attributes, follow these steps:
    1. Go to Settings > Custom Rule Attributes.
    2. To export the rule mappings for the custom rule attributes, select the checkbox. Otherwise, only the custom rule attributes are exported.
    3. Click Export.
    4. Save the file and then close the Custom rule attribute management window.
  2. To import custom rule attributes, following these steps:
    1. Go to Settings > Custom Rule Attributes.
    2. Click Import.
    3. In the Import custom rule attributes page, click Select JSON file to import and browse to where the exported JSON file is located.
    4. Select the JSON file and click Open > Import > Close.
    5. Close the Custom rule attribute management window.

What to do next

You can export rules with their custom attribute mappings from the report menu bar. For more information, see Exporting rules.