IBM Support

QRadar EDR On Prem: How to check if Hive-Cloud is enabled

Question & Answer


Question

Is there a way for the administrators to check if Hive-Cloud is enabled after it has been enabled by the IBM Support team?

Answer

  1. Check the status of the feeds-api pods
    1. When Hive-Cloud is enabled, two feeds-api pods will be running on OpenShift.
    2. Use the following command to verify that there are two feeds-api pods in the target namespace and that they are in the "Running" state:
      oc get pods -n <CP4S_NAMESPACE> | grep feeds-api
  2. Check the Cloud Analysis Score in an alert
    1. Log in to the Hive dashboard.
    2. Either trigger a test alert or open an existing alert.
    3. Check if the "Cloud Analysis Score" field is displayed in the alert details view.
      For example:
      image-20250918095428-1
    4. If it is displayed, Hive-Cloud is enabled.
  3. Check via Threat Hunting
    1. Log in to the Hive dashboard.
    2. Navigate to the "Threat Hunt" tab.
    3. Search for the "Process Created" events.
    4. Verify whether the corresponding events displays Cloud Analysis (Cloud Score) information.
      For example:
      image-20250918094852-1
Notes:  
  • If Hive-Cloud is not enabled, the "Cloud Analysis Score" field will not be displayed.
  • If the two feeds-api pods are not running, the Hive-Cloud enablement process may not have been completed.

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSVOEH","label":"IBM Security ReaQta"},"ARM Category":[{"code":"a8m3p000000hBSAAA2","label":"Administrative Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Product Synonym

ReaQta

Document Information

Modified date:
18 September 2025

UID

ibm17245203

Page Feedback