Network activity

In IBM QRadar you can investigate the communication sessions between two hosts.

If the content capture option is enabled, the Network Activity tab displays information about how network traffic is communicated and what was communicated. Using the Network Activity tab, you can do the following tasks:

• Investigate the flows that are sent to QRadar in real time.
• Search network flows.
• Monitor network activity by using configurable time-series charts.

For more information, see Network activity monitoring.