IBM Support

QRadar: Offense state after upgrade

Question & Answer


Question

After an upgrade, do offenses go into the Inactive state?

Answer

No. After an upgrade, offenses retain their original state and do not become Inactive. For more information about offense states, review this article.
NOTE: Some upgrades might involve moving configuration backups to new hardware. If a configuration backup has offenses, when the backup is restored, the offenses become Inactive. This behavior is not related to the upgrade process itself. For more information, review this article.

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwthAAA","label":"Offenses"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Version(s)"}]

Document Information

Modified date:
12 November 2020

UID

ibm16360161