Skip to content

Qradar request returns "Success". but NO case created from offence #32

Description

@shehreyarahmedkohati

Using these versions:
Hive version=3.1.1
ES= 5.6.9

Qradar section
[QRadar]
server:192.168.10.199
auth_token:---*
cert_filepath:/home/Downloads/qradar.cer
api_version:8.0

Request to Qradar:
curl --header "Content-Type: application/json" --request POST --data '{"timerange":10000}' http://192.168.10.199/QRadar2alert

response:
{"offences": [], "succes:true"}

I have 4 offences at the moment in the Qradar web console.

What might possibly be the issue here?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions