data.destination.siem.QRadar > set mode
The data.destination.siem.
command enables you to change the default output mode for the IBM QRadar output.QRadar
> set mode
Syntax
data.destination.siem.
QRadar
> set mode [forward|hold|disabled]
Example
data.destination.siem.
QRadar
> set mode forward
Data will start transmitting immediately
ok