Resetting Qradar integration and keep mapped alerts.

Josep — Tue, 08 Nov 2022 15:29:11 GMT

Hello colleagues,

I'm using Qradar integration with all the alerts mapped and parameters configured. In order to solve a "fetch events" puntual problem is recommended to reset the integration with empty parameters and the use again the already working parameters. This will reset the integration and will solve some bugs, however, I don't know if it will unmap all the alerts.

Do reseting Qradar integration will unmap the alerts?

Thank you.

Re: Resetting Qradar integration and keep mapped alerts.

jfernandes1 — Wed, 09 Nov 2022 00:04:47 GMT

Hi @Josep, already ingested incidents will not be affected. Also, if you've made some changes to the mapper that will also not be affected.

topic Resetting Qradar integration and keep mapped alerts. in Cortex XSOAR Discussions

Resetting Qradar integration and keep mapped alerts.

Re: Resetting Qradar integration and keep mapped alerts.