C1000-156 · Question #11
What occurs when QRadar reaches the events per second (EPS) or flows per minute (FPM) shared license pool limits?
The correct answer is C. Data accumulates in a temporary burst handing queue, but QRadar continues to process events. When IBM QRadar SIEM V7.5 reaches the events per second (EPS) or flows per minute (FPM) shared license pool limits, the following occurs: Burst Handling Queue: QRadar utilizes a temporary burst handling queue to manage the overflow of events and flows. This queue temporarily…
Question
What occurs when QRadar reaches the events per second (EPS) or flows per minute (FPM) shared license pool limits?
Options
- AIncremental Licensing removes the limits on EPS and FPM.
- BQRadar generates a notification that the limit was reached and stops processing.
- CData accumulates in a temporary burst handing queue, but QRadar continues to process events
- DEvents and flows continue to process, and the Network and Log Activity tabs remain active.
How the community answered
(47 responses)- A13% (6)
- B2% (1)
- C77% (36)
- D9% (4)
Explanation
When IBM QRadar SIEM V7.5 reaches the events per second (EPS) or flows per minute (FPM) shared license pool limits, the following occurs: Burst Handling Queue: QRadar utilizes a temporary burst handling queue to manage the overflow of events and flows. This queue temporarily holds data until the system can process it. Continued Processing: QRadar continues to process events and flows despite reaching the license limits, ensuring no data is lost. Efficiency: This mechanism allows QRadar to handle short-term spikes in data volume without compromising the integrity or continuity of event and flow processing.
Topics
Community Discussion
No community discussion yet for this question.