Troubleshooting
Problem
You have configured Network Hierarchy Domains, but they are not getting applied to events or flows.
Cause
Domains are used to help segment the network so that relevant information is available only to those who need it. If your domains were configured in the Network Hierarchy, but the Events and Flows were not configured for the domains you might not receive the expected results.
Resolving The Problem
To resolve this issue, you need to take one of the following actions:
- Remove the domains from network hierarchy
- Add Events and Flows to the Domains
Removing Domains from the Network Hierarchy
- Log in to the QRadar User Interface (UI).
- Click Admin > Network Hierarchy.
- Remove the network in question from the Network Hierarchy.
- Save and deploy your changes.
Adding Events and Flows to the Domains
- Log in to the QRadar User Interface (UI).
- Click Admin > Domain Management.
- Click Events or Flows and add the criteria of the missing events.
- Save and deploy your changes.
Please refer to the Knowledge Center for more information on Domain segmentation.
Where do you find more information?
[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Admin Console","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
31 August 2018
UID
swg21992462