Integrate TAXII Feed from Alienvault OTX into IBM Qradar

Question

I am currently trying to integrate the TAXII Feed provided by Alienvault OTX into QRadar. Now I have the problem that no "items" are retrieved from the TAXII server. The setup is "working", I followed the instructions described in this link: https://otx.alienvault.com/api. The feed is shown in the list of taxii feeds in Qradar, bus just isn't polled in regular intervalls and nothing is being retrieved. Has anyone had the same issue before? And how do you select which type of IOC you want to get (IPv4, domains, etc.), because how I see it, you can only select the default Alienvault Feed (still doesn't get me anything).

Thanks

Answer 1

There is a topic about OTX integration.

You can check from below link;

https://developer.ibm.com/answers/questions/443089/has-anyone-integrated-otx-thread-feeds-with-qradar/