IBM Support

QRadar: The maximum number of results that are reached in a Log Activity query

Question & Answer


Question

What is the maximum number of results that can be shown in the IBM QRadar Console?

Cause

When a large search or query is executed, it could be canceled or interrupted when the maximum number of results is reached showing the following message:

The maximum number of results has been reached for this query.

The message above is related to the limit of results that can be searched. The limit to the search results is the maximum number of results that can be returned. The maximum size of a signed integer (2^31), which is 2,147,483,647, is displayed in the GUI.


Answer

Use search filters to prevent reaching the maximum number of results per query.


Where do you find more information?



[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Log Activity","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21991769