Internal events
IBM QRadar appliances generate a small number of internal events when they communicate with each other as they process data.
To ensure that the internal events are not counted against the allocated capacity, the system automatically returns all internal events to the license pool immediately after they are generated.