Incident creation from IBM QRadar offenses

BMC Helix Multi-Cloud Broker provides prebuilt integration with IBM QRadar Security Information and Event Management (SIEM) to create incidents in BMC Helix ITSM whenever QRadar SIEM offenses are generated.

Scenario

Workflow

Apex Global implements their requirements by using BMC Helix Multi-Cloud Broker:

Results

After Apex Global performs the tasks to integrate BMC Helix ITSM with QRadar SIEM, QRadar SIEM offenses are synchronized to BMC Helix ITSM incidents in the following ways: 

1. QRadar SIEM generates offenses whenever it detects a security threat.
2. BMC Helix Multi-Cloud Broker validates the trigger conditions and creates a ticket in BMC Helix ITSM.
3. BMC Helix ITSM displays the incident details in the BMC Helix ITSM: Smart IT console.

Benefits

• Effective ticket management from a single console.
• Easily track issues through automatic ticket creation and updates.
• Remediate issues before a service request is created for the problem.