Visualization of the status of QRadar hosts

The Hosts dashboard helps you visualize the health and status of each host and the overall health and status of your deployment.

From the Hosts page, you can access each host page in your deployment. The QDI Health Status shows information about Ariel and REST API status, QDI database size, and QDI memory process usage.

The deployment health is calculated based on two factors in the following priority order:
  1. The status of the host.
  2. The severity of the notifications in each host.

Expand each host row to see the status.

Demonstration

The following demonstration shows an example of the Host dashboard and how to:
  • (00:00 - 00:12) Expand the status summary of each host and view any notifications that are present.
  • (00:13 - 00:35) View metrics specific to a QRadar® host such as processes, flows, events, CPU usage, and memory usage.
  • (00:36 - 00:45) Go to the QDI Health Status page to view the health of the IBM® QRadar Deployment Intelligence app.
A video demonstration to show an example of how to view and manage the Host dashboard.

Host-specific view

Click the hostname link in the hostname column to drill through to see system and advanced information about the host. You can also click the hostname on any chart that it appears, to open the host-specific view.

System view

You can use the charts and graphs on the System tab to monitor the status and health of the host and to see the metrics of processes and resources that are used by the host and its components. You can view top-level information such as CPU Memory and Disk Usage and the overall status of that host. Any notifications are displayed in order for that host.

The following table describes a few of the charts and graphs you can use to analyze the health and performance of each host in your deployment.

Table 1. System view
Charts and graphs Description
Status Uptime This pie chart displays the percentage of time a host spends in different QRadar system states. The monitoring time that is taken for calculating this metric is shown in the title bar. Two pie charts are used for HA hosts, one for the HA active, and another for the HA standby host.
Process Monitor This chart displays the list of QRadar Java™ (JVM) processes, their status, and the last outage duration and start time.
Component Status Feed This chart displays changes in the status of QRadar JVM processes.

Advanced view

In the Advanced view, you select the component of the host you want to view and the details are generated.

For example, if you want the metrics that are generated for the accumulator component of a host, you select that component and charts are generated displaying the following metrics:
  • Preprocessor CPU utilization
  • Preprocessor thread states
  • Aggregation CPU utilization
  • Aggregation thread states
  • Accumulation time

Demonstration of Advanced view

When you select a component from the menu, the QRadar Deployment Intelligence app generates the charts that show the metrics and processes for the component that you selected. The following demonstration shows how to select a component and the generated charts.

A video demonstration that shows how to select a component and generate\charts.