06-01-2020 03:03 AM - last edited on 06-30-2020 06:49 PM by vcotton
I want to add Demsito to our soc and integrate it with Qradar.
i saw that Demisto supports this integration, but i didn't find documentation on such operatation.
06-02-2020 09:49 PM
Hi @DanielBenistiPel -
Start off by going to settings and searching for the integration. From there, you can configure the integration and show the commands that are available.
Also, you may get a faster response on XSOAR questions by posting to the Cortex XSOAR section.
06-02-2020 11:15 PM
the reason i'm asking this question is that i want to know the capabilities that i will receive after that i integrate this two products.
for example can i close a case on Qradar when i closed a case on Demisto.
06-03-2020 08:01 AM - edited 06-03-2020 08:02 AM
in general, all integration reference documentation is located here: https://xsoar.pan.dev/docs/reference/index
Specifically, the IBM Qradar: https://xsoar.pan.dev/docs/reference/integrations/q-radar
Also, you can click on the "Show command" under the integration name to actually see the commands it is exposing once an instance is set up
01-20-2021 07:11 AM
How about your integrate with Qradar? so far so good?
Because i have problem when i closed incident in demisto and let close offense in Qradar if
there are rule in the offense that use time to be condition in rule and it close before it came
to cold period, the next offense name will display wrong description.
So, Right now i don't close the offense anymore prevent this problem happen again.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!