Issue with QRadar API 19.0 - Unable to Retrieve Event Data

RubyGrace — Wed, 30 Aug 2023 05:13:54 GMT

I'm using QRadar API version 19.0 to fetch event data from our QRadar instance. I'm making GET requests to the appropriate endpoint, providing the necessary parameters like time range and filters. However, the responses I'm getting seem to be empty, even though I'm certain that there are matching events in the specified time frame. Has anyone else encountered a similar issue with QRadar API 19.0? Give me some suggestions to my problem.

www.rapidfs.com login portal

PAYROLL MANAGEMENT SYSTEM

AllPOINT ATM-NETWORK

RAPID! PAY CARD

Re: Issue with QRadar API 19.0 - Unable to Retrieve Event Data

BPry — Thu, 24 Aug 2023 04:43:18 GMT

@RubyGrace,

Might have more luck asking this question on the IBM community forum or the QRadar reddit community. Assuming that you're at least getting the response and you're just seeing null and empty values, off-hand I would assume a permissions issue and recommend that you look at the permissions assigned to the user or service token you're using.

topic Issue with QRadar API 19.0 - Unable to Retrieve Event Data in General Topics

Issue with QRadar API 19.0 - Unable to Retrieve Event Data

Re: Issue with QRadar API 19.0 - Unable to Retrieve Event Data