---
title: IBM QRadar Offense Ingestion Integration
description: The IBM QRadar Offense Ingestion integration allows you to automatically fetch IBM QRadar offenses and convert them into security incidents and enable automated response actions.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/qradar-ibm.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# IBM QRadar Offense Ingestion Integration

The IBM QRadar Offense Ingestion integration allows you to automatically fetch IBM QRadar offenses and convert them into security incidents and enable automated response actions.

This integration supports the following:

-   Discovery of IBM QRadar offenses that are candidates for security incidents.
-   Fetching recent events or flows associated with an offense.
-   Track key updates to offenses periodically.
-   Mapping of offense, event, and flow fields to security incident fields.
-   Preliminary view of the mapped fields.
-   Setup scheduled ingestions of offenses to create security incidents periodically.
-   Close the offenses when the security incidents are closed.