Configuration

Before you can use the IBM QRadar SOAR Plug-in app, you must configure access to the inbound destinations, create the authorized service token, and then configure the app.

Configuring access to the inbound destinations
Before you configure the IBM QRadar SOAR Plug-in 5.0 app, you must copy the SOAR CA certificates to the QRadar Console to allow access to the SOAR inbound destinations.
Creating an authorized service token
Before you configure the app, you must create an authorized service token to authenticate the API calls made by IBM Security SOAR.
Configuring the QRadar SOAR Plug-in app
You must configure the connection between IBM QRadar and SOAR.
Configuring multi-tenants in QRadar SOAR Plug-in app
The QRadar SOAR Plug-in app supports multitenancy in QRadar. The tenants only see the instance that is assigned to their security profile. Each security profile can be assigned to only one instance of the plug-in, establishing a one-to-one relationship between security profiles and instances.
Testing the connection status
The SOAR Connection Status shows the status of the last connection test for the SOAR inbound destination from IBM QRadar.
Downloading IBM QRadar SOAR Plug-in app log and configuration files
IBM QRadar SOAR Plug-in log files contain detailed information about your deployment. They provide important information when you are trying to resolve issues and might be required if you contact IBM Support.

Parent topic: QRadar SOAR Plug-in app