While reviewing the performance of a QRadar distributed environment, you notice an abnormal number of events that were generated in the past 24 hours:

38750088 - Performance degradation has been detected in the event pipeline. Event(s) were routed directly to storage. As a deployment professional, you ensure that your events per second (EPS) license is adequate and verify that no changes to rules or custom properties were made in the past week. Which of these issues can cause QRadar to generate performance degradation events?

Question

While reviewing the performance of a QRadar distributed environment, you notice an abnormal number of events that were generated in the past 24 hours:

38750088 - Performance degradation has been detected in the event pipeline. Event(s) were routed directly to storage. As a deployment professional, you ensure that your events per second (EPS) license is adequate and verify that no changes to rules or custom properties were made in the past week. Which of these issues can cause QRadar to generate performance degradation events?

Accepted Answer

D. DSM parsing issues can cause the event data to route to storage

Answer

A. Too many users log in to QRadar on a daily basis.

Answer

B. An abnormal number of reports are generated daily

Answer

C. QRadar Vulnerability Manager license is set to only 256 assets

While reviewing the performance of a QRadar distributed environment, you notice an abnormal number of events that were generated in the past 24 hours: 38750088 - Performance degradation has been…

Question

Options

How the community answered

Community Discussion