IBM QRadar Event Collector or QFlow Collector 1201/1501
The IBM® QRadar® QFlow Collector 1201/1501 (MTM 4563-Q5D)appliance can be used as an event collector or a QFlow collector. As a dedicated event collector, IBM QRadar QFlow Collector 1201/1501 appliance collects and parses events from various log sources and continuously forwards these events to an event processor. You can configure the IBM QRadar QFlow Collector 1201/1501 appliance to temporarily store events and only forward the stored events on a schedule. A dedicated event collector does not process events and it does not include an on-board event processor. As a QFlow collector, the appliance provides high capacity and scalable Layer 7 application data collection for distributed deployments and also supports external flow-based data sources. IBM QRadar QFlow Collector 1201/1501 is based on the Lenovo System SR630 M6.
The following table describes hardware information and requirements for the IBM QRadar QFlow Collector 1201/1501 appliance:
The following image is of the IBM QRadar QFlow Collector 1201/1501.
|Events per second||30,000 EPS|
|CPU||1 x Xeon Silver 4216 16C 2.2 GHz 85W|
|Network management transceivers||
2 x 10 GbE Short Range SFP+
The transceivers might have one of the following part numbers:
Use these transceivers with the 2 x 10 GbE SFP+ ports, labeled as  in the appliance diagram
8 x 1 Gb Ethernet
2 x 10 GbE SFP+ ports
1 x RJ-45 10/100/1000 Mb Ethernet systems management (IMM) port
|Memory||4 x 16 GB (64 GB)|
|Storage||4 x 600 GB 10K 12 Gbps SAS 2.5” / 530-8i / RAID 10|
|Power® supply||Dual redundant 750 W AC|
|Dimensions||28.1 inches deep x 17.1 inches wide x 1.7 inches high|
|1||Event Data storage|
|2||Management ports (1 GbE TX)|
|3||10 GbE SFP+ management ports|
|4||1x RJ-45 10/100/1000 Mb Ethernet systems management (IMM) port|
|5||Event Capture ports (1 GbE TX)|
For information about battery removal, see Removing the coin-cell battery (https://thinksystem.lenovofiles.com/help/index.jsp?topic=%2F7X01%2Fcoincell_battery_replacement.html&cp=4_6_8_12).