Security operations qradar integration – run enrichment for ip workflow
- Build QRadar Enrichment Work note activit
- Build QRadar Enrichment Work note activity
The Build QRadar Enrichment Worknote workflow activity adds QRadar enrichment work notes in line with the outcomes of API calls.
- Collect QRadar Configurations activity
The Collect QRadar Configurations workflow activity can be used in the Security Operations QRadar Integration – Run Enrichment for IP workflow (incorporated within the base system) to obtain the QRadar configuration settings defined for that integration.
- Get Local Dest IP Addresses activity
The Get Local Dest IP Addresses workflow activity can be used within the Security Operations QRadar Integration – Run Enrichment for IP workflow (incorporated within the base system) to obtain local destination IP addresses.
- Get Source IP Addresses activity
The Get Source IP Addresses workflow activity can be used within the Security Operations QRadar Integration – Run Enrichment for IP workflow (incorporated within the base system) to obtain source IP addresses.
Resourse: https://docs.servicenow.com/bundle/istanbul-security-management/page/product/qradar-integration/concept/
How to change the IP address in QRadar using the qchange_netsetup command
- Build QRadar Enrichment Work note activity