topic Re: Prisma Cloud Qradar Integration Still Exist? in Prisma Cloud Discussions

Prisma Cloud Qradar Integration Still Exist?

Retired Member — Thu, 12 Nov 2020 00:16:33 GMT

I had this link bookmarked a while ago and now it seems to have been taken down. Is there still native integration? I can't find any documentation around it and it does not show up as an option under enterprise settings->integrations.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-qradar.html

Re: Prisma Cloud Qradar Integration Still Exist?

Retired Member — Tue, 24 Nov 2020 18:19:25 GMT

https://exchange.xforce.ibmcloud.com/hub/extension/d249296e8dba167cc65eb0c38ee67ef1
https://exchange.xforce.ibmcloud.com/hub/extension/46ede8c0299f5e4945fa664997f81521

Both currently use the SQS to Syslog found here, but using OOTB API support is on the roadmap.

https://github.com/PaloAltoNetworks/prismacloud_sqs_to_syslog

Or a function step here:

https://github.com/PaloAltoNetworks/Prisma-CloudFunction-Syslog