Hi everyone, I'm working on a project to integrate IBM QRadar SIEM with Elastic Security. The goal is to use Elastic specifically for its SOAR capabilities (Case Management, Automation, Response Actions) while keeping QRadar as the primary log collector. The setup: All logs are currently ingest…

I think this scenario is pretty rare and I'm not sure if this makes much sense to implement. The features you mentioned that you want to use basically requires that your data is indexed in Elasticsearch, so you would need to duplicate the data you have in QRadar into Elastic and create the Security…

Hello! We have the opportunity to install Elastic Agent on the hosts and we need this functionality: Workflows | Elastic Docs Can you tell me if it is possible to implement this functionality during the free license?

[image] PatreKerier: Can you tell me if it is possible to implement this functionality during the free license? No, Workflows requires an Enterprise license, it does not work with the basic license.

A license that is issued for 30 days should be suitable, right?

[image] PatreKerier: A license that is issued for 30 days should be suitable, right? For a test yes, the trial license will work for 30 days, after that it will stop working.

Using Elastic Security as SOAR for IBM QRadar SIEM (Log Forwarding Architecture)

Elastic Security SIEM

leandrojmp (Leandro Pereira) April 16, 2026, 1:41pm 6

For a test yes, the trial license will work for 30 days, after that it will stop working.

Topic		Replies	Views
Qradar Logs to Logstash/Elastic? Logstash	4	1202	June 27, 2021
Log Forwarding from Elastic to Qradar Elastic Search	1	151	December 4, 2024
Is it possible to forward logs from elasticsearch to qradar Elasticsearch	3	869	July 19, 2024
Qradar logs to elasticsearch Elastic Agent integrations	1	447	October 19, 2022
Elastic search and IBM Qradar integration Elasticsearch	1	5288	May 19, 2019

Using Elastic Security as SOAR for IBM QRadar SIEM (Log Forwarding Architecture)

Related topics