QRadar × AmbactiBring QRadar into
the flow of work.
A little less busywork with QRadar.
Gather contextDo the workReview & share
Ariel searches6 capabilities+
- List Ariel searches
- Create an Ariel search
- Get a search
- Retrieve search results
- Retrieve search metadata
- Delete a search
Analytics rules4 capabilities+
- List analytics rules
- Get an analytics rule
- Get rule dependents
- List rule offense contributions
Assets4 capabilities+
- List assets
- List asset properties
- List asset saved searches
- Retrieve asset saved-search results
Frequently asked
questions.
What could an Ambacti integration do with QRadar?
The documented operations include Ariel searches: List Ariel searches; Ariel searches: Create an Ariel search; Ariel searches: Get a search; Ariel searches: Retrieve search results.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in QRadar?
Decide which work could run on its own and which steps need your review.