IBM Support

QRadar: Flow source requirements for Network Activity

Question & Answer


Question

Should I add new flow sources for every new external flow source sent to QRadar?

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"QFlow 12xx;QFlow 13xx;Flow processor 17xx;Flow processor 18xx","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}},{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS6E69","label":"IBM QRadar Network Insights"},"Component":"QNI 19xx or appliancetype 6x00 series","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
06 February 2019

UID

ibm10744507