Criteria	Usage
Questions with keyword1 or keyword2	keyword1 keyword2
Questions with a mandatory word, e.g. keyword2	keyword1 +keyword2
Questions excluding a word, e.g. keyword2	keyword1 -keyword2
Questions with keyword(s) and a specific tag	keyword1 [tag1]
Questions with keyword(s) and either of two or more specific tags	keyword1 [tag1] [tag2]
To search for all posts by a user or all posts with a specific tag, start typing and choose from the suggestion list. Do not use a plus or minus sign with a tag, e.g., +[tag1].

IOC Manager Extension Issues

Question by bposter (180) | Sep 07, 2017 at 04:31 PM qradar application extension extensions

Installed the early access IOC Manager extension. It installs without complaint but the configuration page looks like it's missing a bunch of elements. If you go to the IOC Manager tab it'll ask for the SEC Token that it fails to save on the config page, but clicking 'Finish' results in a 404. See attached images.

https://imgur.com/VZimN0H
https://imgur.com/iJMSKrh
https://imgur.com/HxgQino

Accepted answer

Answer by ryangoldblatt (106) | Sep 13, 2017 at 11:46 AM

Thanks. Are you using a FQDN in the URL to reach QRadar by any chance? I was able to reproduce the issues you are seeing using this rather than the console IP.

We are looking to see if can get an update to resolve this. In the meantime the IOC app should be fully functional if you are able to use the console IP address to access QRadar.

Ryan

0 Show 4 Share

bposter (180) Sep 18, 2017 at 04:45 PM 0

That does fix the problem, looking forward to the update. However, the comments field is still ignored and anything added has a comment of "reference data api".

ryangoldblatt (106) bposter (180) Nov 03, 2017 at 06:36 AM 0

Hi @bposter just FYI an updated version of IOC Manager is now up on App Exchange which should now resolves issues when accessing using a FQDN in the URL:

https://exchange.xforce.ibmcloud.com/hub/extension/57e93c51cafc23553b9192cc57fb6182

bposter (180) ryangoldblatt (106) Nov 06, 2017 at 11:44 AM 0

Confirmed fixed. Thanks! Now we just need to know what the comment field actually does. ;)

Show more comments

Answer by ryangoldblatt (106) | Sep 11, 2017 at 09:23 AM

@bposter which QRadar version including patch level have you installed the app on?

Best way to get this is either web interface Help->About or SSH into console and run:

/opt/qradar/bin/myver

Thanks, Ryan

0 Share

Answer by bposter (180) | Sep 11, 2017 at 11:42 AM

I believe I'm on Patch 6.

7.2.8.20170403173410

0 Share

IOC Manager Extension Issues

3 answers

Follow this question

IOC Manager Extension Issues

3 answers

Follow this question

Related questions