---
title: IBM QRADAR
slug: authentication-guides/ibm-qradar
docTags: 
createdAt: 2026-03-11T00:15:11.815Z
---

# Introduction

This guide explains how to authenticate the IBM QRadar connector in Swimlane using API Key authentication. You will generate a QRadar SEC token, collect the required deployment URL, and configure the connector asset in Swimlane.

# Prerequisites

## QRadar Access Requirements

You must have QRadar administrator or equivalent permissions to:

- Access the QRadar Admin console
- Create Authorized Services for API access
- Generate SEC tokens
- View system deployment URL and API endpoint

## Required Credentials

During setup you will collect:

- QRadar Deployment URL
- SEC Token (API Key)
- Optional API Version

# IBM QRadar API Setup

Take the following steps to generate a SEC API Token in QRadar:

1. Log in to the IBM QRadar console using administrator credentials.
2. From the top navigation bar, click Admin.
3. Navigate to User Management → Authorized Services.
4. Click Add Authorized Service.
5. Enter the following information:
6. Service Name (example: Swimlane\_API\_Access).
7. User Role with appropriate permissions for the API.
8. Expiry Date if required.
9. API Access level appropriate for your environment.
10. Click Create to generate the SEC token.
11. Copy and securely store the token. It will only be shown once.

## Retrieve the QRadar API URL

1. Log in to the QRadar console.
2. Navigate to Admin.
3. Locate system information under System and License Management.
4. Identify the QRadar host or IP address.
5. Construct the API endpoint using the format: https\://\<QRadar-IP>/api/

Example API URL: https\://192.168.1.100/api/

## Optional: Test the QRadar API Token

You can validate the SEC token using a simple cURL command:

curl --location 'https\://\<QRadar-IP>/api/siem/offenses' --header 'SEC: \<your\_token>' --header 'Range: items=0-0'

If the request returns offense data, the API token is working correctly.

# Connector Configuration in Swimlane

1. Log in to Turbine.
2. From the left navigation pane click **ORCHESTRATION** and select **Assets.**
3. Click the **Plus (+)** icon to create a new asset.
4. Select **IBM QRadar** from the **Asset Type** list.
5. Fill in the **Asset Settings** and **Asset Input&#x20;**&#x66;ields as shown below.

| **Field**    | **Description**                                                           | **Required** |
| ------------ | ------------------------------------------------------------------------- | ------------ |
| url          | Base URL of the QRadar API endpoint (example: https\://\<QRadar-IP>/api/) | Required     |
| SEC          | QRadar SEC token used for API authentication                              | Required     |
| api\_version | Specify QRadar API version if required. Default uses latest version       | Optional     |
| verify\_ssl  | Enable or disable SSL certificate verification                            | Optional     |
| http\_proxy  | Proxy configuration if API requests must pass through a proxy             | Optional     |

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/miZcCNkycAblr7KdwJXZx_image.png)

# Troubleshooting

- Ensure the SEC token was copied correctly when the Authorized Service was created.
- Verify the QRadar API URL uses the correct host or IP address followed by /api/.
- Confirm the user role assigned to the Authorized Service has sufficient permissions.
- If API requests fail with authentication errors, regenerate the SEC token and update the Swimlane asset.
- If SSL errors occur, verify SSL settings or disable SSL verification if appropriate for your environment.
- If QRadar is behind a proxy, configure the http\_proxy field in the Swimlane asset.

**Result**

You have successfully authenticated the IBM QRadar connector in Swimlane.

**Sources**

- IBM QRadar API Documentation: [https://www.ibm.com/docs/en/qradar-common](https://www.ibm.com/docs/en/qradar-common)
- IBM QRadar Ariel Query Language Documentation: [https://www.ibm.com/docs/en/qradar-common?topic=language-ariel-query](https://www.ibm.com/docs/en/qradar-common?topic=language-ariel-query)
- AirMDR QRadar Integration Guide: [https://docs.airmdr.com/Integrations/QRadar](https://docs.airmdr.com/Integrations/QRadar)