IBM QRadar Event Collector or QFlow Collector 1201/1501

The IBM® QRadar® QFlow Collector 1201/1501 (MTM 4563-Q5D)appliance can be used as an event collector or a QFlow collector. As a dedicated event collector, IBM QRadar QFlow Collector 1201/1501 appliance collects and parses events from various log sources and continuously forwards these events to an event processor. You can configure the IBM QRadar QFlow Collector 1201/1501 appliance to temporarily store events and only forward the stored events on a schedule. A dedicated event collector does not process events and it does not include an on-board event processor. As a QFlow collector, the appliance provides high capacity and scalable Layer 7 application data collection for distributed deployments and also supports external flow-based data sources. IBM QRadar QFlow Collector 1201/1501 is based on the Lenovo System SR630 M6.

The following table describes hardware information and requirements for the IBM QRadar QFlow Collector 1201/1501 appliance:

The following image is of the IBM QRadar QFlow Collector 1201/1501.

Table 1. IBM QRadar QFlow Collector 1201/1501 specifications
Description Value
Events per second 30,000 EPS
CPU 1 x Xeon Silver 4216 16C 2.2 GHz 85W
Network management transceivers

2 x 10 GbE Short Range SFP+

The transceivers might have one of the following part numbers:
  • Avago AFBR-709SMZ-IB8
  • Finisar FTLX8571D3BCL-BN
  • BNT BN-CKM-SP-SR

Use these transceivers with the 2 x 10 GbE SFP+ ports, labeled as [3] in the appliance diagram

Ports

8 x 1 Gb Ethernet

2 x 10 GbE SFP+ ports

1 x RJ-45 10/100/1000 Mb Ethernet systems management (IMM) port

Memory 4 x 16 GB (64 GB)
Storage 4 x 600 GB 10K 12 Gbps SAS 2.5” / 530-8i / RAID 10
Traffic 1 Gbps
Power® supply Dual redundant 750 W AC
Dimensions 28.1 inches deep x 17.1 inches wide x 1.7 inches high
Figure 1. Front and rear panel of the IBM QRadar QFlow Collector 1201/1501
Image showing the back and front panels of the QRadar 1201/1501 appliance.
Table 2. Legend for use with the IBM QRadar QFlow Collector 1201/1501 image
Label Description
1 Event Data storage
2 Management ports (1 GbE TX)
3 10 GbE SFP+ management ports
4 1x RJ-45 10/100/1000 Mb Ethernet systems management (IMM) port
5 Event Capture ports (1 GbE TX)

For information about battery removal, see Removing the coin-cell battery (https://thinksystem.lenovofiles.com/help/index.jsp?topic=%2F7X01%2Fcoincell_battery_replacement.html&cp=4_6_8_12).