C1000-156 · Question #17
A user reports that some data points are missing from a generated report. The logs show these notifications, which are determined to be the root cause of the problem: The accumulator was unable to…
The correct answer is D. 60 seconds. In IBM QRadar SIEM V7.5, the accumulator process must complete data aggregation within a specific timeframe to be deemed successful: Timeframe: 60 seconds Aggregation Process: The accumulator aggregates events and flows for reporting and analysis. If it cannot complete this…
Question
A user reports that some data points are missing from a generated report. The logs show these notifications, which are determined to be the root cause of the problem:
The accumulator was unable to aggregate all events/flows for this interval. In what timeframe does this system need to complete data aggregation for it to be deemed successful?
Options
- A30 seconds
- B5 seconds
- C120 seconds
- D60 seconds
How the community answered
(20 responses)- A5% (1)
- C10% (2)
- D85% (17)
Explanation
In IBM QRadar SIEM V7.5, the accumulator process must complete data aggregation within a specific timeframe to be deemed successful: Timeframe: 60 seconds Aggregation Process: The accumulator aggregates events and flows for reporting and analysis. If it cannot complete this task within 60 seconds, it is considered unsuccessful. Impact: Failure to aggregate within the specified timeframe can result in missing data points in reports and dashboards, affecting the accuracy and completeness of the information presented.
Topics
Community Discussion
No community discussion yet for this question.