Event and flow notifications for QRadar appliances

Event or flow data not indexed
38750101 - Event/Flow data not indexed for interval.
Event pipeline dropped connections
38750061 - Connections were dropped by the event pipeline.
Event pipeline dropped events
38750060 - Events/Flows were dropped by the event pipeline.
Events routed directly to storage
38750088 - Performance degradation has been detected in the event pipeline. Event(s) were routed directly to storage.
Expensive custom properties found
38750138 - Performance degradation was detected in the event pipeline. Expensive custom properties were found.
Flow collector cannot establish initial time synchronization
38750009 - Flow collector could not establish initial time synchronization.
Maximum events or flows reached
38750008 - The appliance exceeded the EPS or FPM allocation within the last hour.

Parent topic: QRadar system notifications