Resetting Qradar integration and keep mapped alerts.

[Josep]

Hello colleagues,

I'm using Qradar integration with all the alerts mapped and parameters configured. In order to solve a "fetch events" puntual problem is recommended to reset the integration with empty parameters and the use again the already working parameters. This will reset the integration and will solve some bugs, however, I don't know if it will unmap all the alerts.

Do reseting Qradar integration will unmap the alerts?

Thank you.

[jfernandes1 · Accepted solution]

Hi @Josep, already ingested incidents will not be affected. Also, if you've made some changes to the mapper that will also not be affected.