Known Issues
The QRadar Use Case Manager has required information for known issues.
Unable to Search for the Forward Slash Character in Regex
The app cannot search for the forward slash character (/) in regular expressions. For example, on the Rules Explorer page in the rule name or test definition in the filters, and rule name in the search bar of the table. As a work-around, use a question mark (?) as a wild character.
Corrupted Custom Rule Prevents Using Related Functionality
A corrupted rule in QRadar prevents the QRadar API from returning required data. This prevents the QRadar Use Case Manager app from using rule-related functions.
Issues specific to QRadar 7.3.1
Rules file must be manually uploaded. For more information, seeConfiguring QRadar Use Case Manager with Up-to-date Rules in QRadar 7.3.1.
Editing ports in rules in the IPs and Ports tab in the Host Definitions page of a rule is only supported on QRadar 7.3.2 or later.
The Current rule-log source type coverage chart is only available in QRadar 7.3.2 Fix Pack 1 or later.
The toggle to enable or disable the rule columns in the report is not available.
The duplicate rule capability doesn't work.