Collecting flows

By collecting flows, you can investigate the network communication sessions between hosts.

1. Click the Admin tab.
2. In the navigation menu, click Data Sources > Flows.
3. Click the Flow Sources icon.
4. Review the list of flow sources and make any necessary changes to the flow sources.
   For more information about configuring flow sources, see the IBM QRadar Administration Guide.
5. Close the Flow Sources window.
6. On the Admin tab menu, click Deploy Changes.