Collect QRadar Configurations activity The Collect QRadar Configurations workflow activity is used in the Security Operations QRadar Integration - Run Enrichment for IP workflow (included in the base system) to get the QRadar configuration settings defined for the integration. Output variables The output variables contain data that can be used in subsequent activities. Table 1. Output variables Variable Description endpoint_base [string] The base URL for QRadar use_mid_server [true/false] True if QRadar proxies requests through a MID Server. service_token [string] A token created by the QRadar administrator to authenticate API users. use_default_workflows [true/false] True if the QRadar - Security Incident Enrichment workflow is used to automate the pulling of QRadar data.