Guidelines for network resources

Given the complexities and network resources that are required for IBM QRadar SIEM in large structured networks, follow the suggested guidelines.

The following list describes some of the suggested practices that you can follow:

• Bundle objects and use the Network Activity and Log Activity tabs to analyze your network data.

  Fewer objects create less input and output to your disk.

• Typically, for standard system requirements, do not exceed more than 200 objects per group.

  More objects might impact your processing power when you investigate your traffic.