Question & Answer
Looking at the Linux users created as part of the QRadar installation, there is a mysql user. What is this user and what is it used for?
The mysql user was included as part of the QRadar Forensics package for the PCAP Appliance to communicate with QRadar. The process is not running, as the current system is not licensed for QRadar Incident Forensics; however it is one code stream, which is why you see the local user created.
Where do you find more information?
Was this topic helpful?
16 June 2018