Collect QRadar Configurations activity

The Collect QRadar Configurations workflow activity is used in the Security Operations QRadar Integration - Run Enrichment for IP workflow (included in the base system) to get the QRadar configuration settings defined for the integration.

Output variables

The output variables contain data that can be used in subsequent activities.

Table 1. Output variables
Variable Description
endpoint_base [string] The base URL for QRadar
use_mid_server [true/false] True if QRadar proxies requests through a MID Server.
service_token [string] A token created by the QRadar administrator to authenticate API users.
use_default_workflows [true/false] True if the QRadar - Security Incident Enrichment workflow is used to automate the pulling of QRadar data.