Installing the IBM X-Force Exchange plug-in

Install the IBM X-Force Exchange plug-in on your QRadar Console so that you have right-click functionality to access data in IBM X-Force Exchange.

Before you begin

This procedure requires a web server restart from the Admin tab to load the plug-in after the RPM is installed. Restarting the web server logs out all QRadar users, so it is advised that you install this plug-in during scheduled maintenance.

About this task

If your QRadar system is version 7.2.3 or later, the plug-in is already installed. Administrators can verify that the plug-in is installed by right-clicking on any IP address in QRadar, and selecting More Options > Plugin options. If the IBM X-Force Exchange lookup is displayed, then the plug-in is installed.

Procedure

  1. Download the X-Force Exchange right-click plug-in from IBM Fix Central (https://ibm.biz/BdX4BW).
    1. Copy the RPM file to the QRadar Console.
    2. Type the following command to install the plug-in: rpm -Uvh RightClick-XFE-7.2.<version>.x86_64.rpm
  2. Log in to the QRadar Console as an admin user.
  3. On the navigation menu ( Navigation menu icon ), click Admin.
  4. Select Advanced > Restart Web Server.

    After the web server restarts, the X-Force right-click plug-in is enabled for IP addresses in QRadar for URL fields in the Log Activity tab.

  5. Log in to the pop-up window for the X-Force Exchange website by using your IBMid, or continue as a guest.

    Guest users are not able to use all features on the X-Force Exchange website.

  6. Close the browser window after the initial login to the IBM X-Force Exchange website.