Specifies a list of addresses from which QRadar can receive events. |
Use this command to create the subscription required to send Change Auditor event data to QRadar.
Example: Create a subscription to send all subsystems event data to a QRadar instance
$allSubsystems = Get-CAEventExportSubsystems -Connection $connection
Use this command to see the details of the current QRadar subscriptions.
Get-CAQRadarEventSubscriptions -Connection $connection
The command returns the following information.
How often (in milliseconds) heartbeat notifications are sent. | |
Batch size. (The maximum number of events that the active batch size can increase to.) | |
Use this command to modify a QRadar subscription.
Example: Disable a subscription
Example: Edit the subsystems included in a webhook subscription
© ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center