How do I integrate with IBM QRadar?

With our IBM QRadar SIEM integration, you are able to receive asset information from Holm Security VMP directly into IBM QRadar. This data can subsequently be processed by QRadar via an AXIS scan. This integration runs via a script that makes the correct requests to the Holm Security REST API for you. It's recommended to set up a Cron job that executes the script regularly.

Prerequisites

API access needs to be enabled, and an API token must be created in Holm Security. The token and base URL are used for establishing the integration. Make sure that the net-assets endpoint is allowed for reading while creating the token.

Read more on how to set up an API token here:
https://support.holmsecurity.com/knowledge/how-do-i-set-up-an-api-token

Setup

You can find the scripts and readme here (external link):
https://github.com/holmsecurity/api-examples/tree/master/integrations/Qradar