TAXII into QRadar

Reply
L1 Bithead

Re: TAXII into QRadar

Hi Dan,

 

Just follow the below steps:

Login to qradar using root and execute the below command

Step 1

1./opt/qradar/support/qapp_utils.py ls

 

Step 2:

 

Note down the app id of threat intelligence.

 

step 3:

 

Connect the app container using the below command

 

#/opt/qradar/support/qapp_utils.py connect <app_id>

 

Step 4:

 

Add the host entry of the certficate name with the IP and try to wget to the  url which you have added .

 

Step 5:

 

Go to the TAXII plugin and while adding the taxii url give the name which you have configured inside the container and try.

it should work. Actually i tried and its working for me.

 

Thanks and Regards,
Ramprasath


@DanWoodruff wrote:

Hi Luigi, 

 

It's a valid cert but I think it might have been installed without the full chain. I plan to give that a try soon. Thanks,

 

Dan



@DanWoodruff wrote:

Hi Luigi, 

 

It's a valid cert but I think it might have been installed without the full chain. I plan to give that a try soon. Thanks,

 

Dan




 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!