Overview dashboard

The Overview page in QRadar® Deployment Intelligence shows the cumulative health details of the entire deployment and can be used as a starting point for detailed analysis.

The Overview consists of the Deployment and Performance tabs.

Deployment page

Use the charts on the Deployment page to help you visualize QRadar metrics and statistics at the deployment level. The following image is an example of the Deployment tab of the Overview page.

Figure 1. Overview Deployment page
An image that shows an example of the Deployment tab of the Overview page

The following table describes some of the charts that are available and how to use them.

Table 1. Deployment view
Chart Description
Host Status Overview The Host Status Overview chart shows the count of hosts in different QRadar states.
User Activity

The User Activity chart displays a high-level view of the QRadar application load. Three major activities are listed:

User Session Count: The count of users and logged in sessions in QRadar.

Running Queries Count: The number of Ariel search queries running in QRadar. This metric is sampled every minute and does not account for short transient queries that run for less than 1 minute.

Cursor: The count of the Ariel search cursors that are present on the system.
Top User/User Group by Search Activity
This chart displays search activity statistics for each user or user group.
  • Search Activity by Users
  • Search Activity by User Roles
Top Users By API Activity

Displays QRadar REST API activity statistics for each user, by user and user role.
License and Event/Flow Rate

Displays the total event and flow rate across all the hosts in the deployment and also displays the license limit and the license that is allocated to hosts.

Performance page

You use the information on the Performance page to view QRadar metrics and statistics at the application, pipeline, and system level. The following image is an example of the Performance tab of the Overview page.

Figure 2. Overview Performance page
An image showing an example of the Performance tab of the Overview page.
Table 2. Performance view
Chart Description
Top/Bottom Pipeline Utilization, Saturation, and Errors/Drops This group of charts displays the highest and lowest hosts by QRadar event pipeline utilization, saturation and drops.
Expensive QRadar Application Artifacts These charts show the most recent expensive QRadar application artifact by data usage.
Top/Bottom Hosts by System Metrics These charts display the highest and lowest hosts in the deployment that are identified by different operating system metrics.
Deployment System Metric Averages These charts display the averages of system metrics across all hosts in the deployment.