Document toolboxDocument toolbox

data.destination.siem.QRadar > set mode

The data.destination.siem.QRadar > set mode command enables you to change the default output mode for the IBM QRadar output.

Syntax

data.destination.siem.QRadar > set mode [forward|hold|disabled]

Example

data.destination.siem.QRadar > set mode forward
Data will start transmitting immediately
ok