IBM Support

QRadar: License usage for Stored events

Question & Answer


If events are not parsed and are going to Stored state directly, are they still counted against the license usage? If they do contribute to license usage, does a license giveback occur for such events?


Events going directly to the Stored state, still count against the license usage.  No license giveback occurs for such events.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
21 June 2021