IBM Support

QRadar QNI functionality - Why on QNI 6500 (VM) Flow Source is auto created but disable by default

Question & Answer


Question

QNI Overview:
IBM® QRadar® Network Insights (QNI) connects to network TAPs, SPAN, or mirror ports to access full packet data for real-time analysis.
All QRadar Network Insights appliances and software (VM) provide detailed analysis of network flows to extend the threat detection capabilities of QRadar.
The new Virtual (QNI 6500) provides the same visibility and function in your virtual network infrastructure that QRadar Network Insights appliances provide in your physical environment.



 

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS6E69","label":"IBM QRadar Network Insights"},"ARM Category":[{"code":"a8m0z000000cwtJAAQ","label":"QRadar Network Insights"}],"ARM Case Number":"TS017052984","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
11 September 2024

UID

ibm17168091