Configuring QRadar EDR to communicate with QRadar

To send events from IBM Security QRadar EDR to IBM QRadar, you need an API ID and a Secret Key.

Procedure

  1. Log in to your QRadar EDR console.
  2. Go to Administration > API Applications.
  3. Click Create Application.
  4. In the Application Name field, type a name for the application, then click Create.
  5. Copy and save the App ID and the Secret Key values. You need these values when you add a log source in QRadar.

What to do next

Adding a log source that uses the IBM Security QRadar EDR REST API protocol