What's new in REST API Version 28.0

IBM® QRadar® 7.5.0 Update Package 15 introduces version 28.0 of the API endpoints.

Updated endpoints

The following Configuration - Log Source Management endpoints are modified to support multiple identifiers per log source:.
  • GET /config/event_sources/log_source_management/log_sources
  • POST /config/event_sources/log_source_management/log_sources
  • PATCH /config/event_sources/log_source_management/log_sources
  • GET /config/event_sources/log_source_management/log_sources/{id}
  • POST /config/event_sources/log_source_management/log_sources/{id}
  • GET /config/event_sources/log_source_management/protocol_types
  • GET /config/event_sources/log_source_management/protocol_types/{id}
All version 24.x API endpoints are marked as deprecated in QRadar 7.5.0 Update Package 13.
Note: Although deprecated endpoints continue to function, they will be removed in a future release. You must update your integration to use the most recent version of the QRadar RESTful API. Responses to deprecated endpoint requests include a Deprecated response header.