High-Level Functionality

The Cortex® Xpanse™ QRadar App integration allows you to consume and access Cortex® Xpanse™ data through QRadar.
The Cortex® Xpanse™ QRadar App integration enables you to consume and access Cortex Xpanse data through QRadar. QRadar ingests data as log events and assigns them to two separate Log Sources called
ExpanseExpander
. Once ingested, QRadar can correlate Cortex Xpanse events with other events or alerts based on offense rule configurations.
For more information, see this blog post announcing the Cortex Xpanse-IBM QRadar integration.

Recommended For You