search

IBM / api-samples

Samples code that uses QRadar API's
Apache License 2.0
198 stars 82 forks source link

Please provide `/config/event_sources/log_source_management/log_sources` examples #20

Open maxamillion opened 5 years ago

maxamillion commented 5 years ago

In the latest versions of the QRadar REST API there's now the ability to manage log sources, however I've been unsuccessful in following the documentation and finding which set of possible parameters are required and which are optional in order to successfully create a log source via the REST API.

I keep getting "The request was well-formed but was unable to be followed due to semantic errors" and I'm unsure of how to proceed. Please advise.

Thank you!

tgonda-discovery commented 4 years ago

Adding log sources is an extremely manual process in qradar as with most siems. It would be of extremely beneficial to see an example of adding a log source. Something as simple as adding a simple syslog source would be beneficial.