WEBHOOK CONFIGURATION ON VSP CMS
-
Log in to CMS using valid credentials
-
Navigate to Administration > Webhooks in the left navigation pane
-
Create five new webhook configurations to configure all the event types using the ADD WEBHOOK link and the values provided in this section
-
Provide relevant values for Name and Description
-
The below values are constant for all the five webhooks:
-
Webhook URL – QRadar instance URL
-
On-premise – https://<QRadarIPAddress>:<Port>
-
On Cloud – https://<QRadarOn-premiseDataGatewayIPAddress>:<Port>
-
-
Content Type – Application JSON
-
Validate SSL/TLS Certificate – Enabled (Disabled if self-signed certificates are used on QRadar)
-
Authentication – None
-
HTTP Headers – None
-
-
The values for Incident Type and Body for the five webhooks are provided in the respective sections