Workflow enhancements in QRadar

Improvements to workflow in IBM® QRadar® for 7.4.0 include three apps previously only available on the IBM Security App Exchange.

Apps installed by default

In QRadar 7.4.0, the IBM QRadar Assistant app, the IBM QRadar Pulse app, and the IBM QRadar Log Source Management app are installed by default.

Use the IBM QRadar Assistant app to manage your app and content extension inventory, view app and content extension recommendations, follow the QRadar Twitter feed, and get links to other information.

IBM QRadar Pulse is a dashboard app that you can use to communicate insights and analysis about your network. Take the pulse of your SOC with dynamic real-time dashboards that provide meaningful insights into your security posture and threat landscape. Visualize offenses, network data, threats, malicious user behavior, and cloud environments from around the world in geographical maps, a built-in 3D threat globe, and auto updating charts. Import and export dashboards to share with colleagues. See offenses unfold near real time and track your security threats from around the globe.

The IBM QRadar Log Source Management app provides an easy-to-use workflow that helps you quickly find, create, edit, and delete log sources. Use the simplified workflow to change parameters for a number of log sources at the same time. To configure log sources in 7.4.0, you must use the IBM QRadar Log Source Management app.

User roles with the system administrator permission are updated automatically to include the required permissions for the apps installed by default. All other user roles must be modified to include the app permissions as needed.