Qradar 7.5.0 Iso

0 views

Skip to first unread message

Liisa Komara

unread,

Aug 5, 2024, 12:15:58 PM8/5/24

to breasomoxprof

WhatI really don't understand is that even the get-modified-remote-data debug command for Crowdstrike Integration (which is working, is mirroring the incidents of Crowdstrike as Incidents in Cortex XSOAR) is giving me an error (screenshot attached).

Now (I don't know why), but the command qradar-reset-last-run is working (screenshot attached), but still the Offenses of QRadar are not being mirroring with Incidents in Cortex XSOAR. After the execution of the command, I generated a new Offense, and nothing happen.

The only thing that I changed on the QRadar server side, is that I changed the timezone of the server, from UTC to GMT-3 (Argentina time zone), the same time zone that Cortex SOAR server has. Maybe that was the problem?