IBM Support

Why do Ariel Charts show activity at the end when there are no events?

Question & Answer


Question

Using the QRadar Search functionality, why do Ariel Charts show activity at the end of charts when there are no incoming events? In Log Activity, one might see a peak at the end of a chart even if there are no events matching that time period.
image-20200214160448-1

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"ariel chart","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.x","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Product Synonym

QRadar; QRadar SIEM

Document Information

Modified date:
21 February 2020

UID

ibm12495199