IBM Support

QRadar EDR (formerly ReaQta): Licensing questions

Question & Answer


Question

What are some common QRadar EDR (formerly ReaQta) licensing questions?

Answer

What is the licensing installation model for ReaQta agent?

The licensing is a per-client-device model that uses the following parameters:

• Number of Workstations.
• Number of Mobile devices.
• Subscription end date.
• Tier: Pro, Enterprise.

For more detailed information about our solution tiers, check the following link ReaQta Hive Product Tiers 
 

How to verify license validity?

From the dashboard, check the data shown in Administration > License.

image-20220328160140-1

How to confirm which license modules are in the license?

From the Hive dashboard, go to Administration > License. The modules listed as Available are the modules included in the license.

image-20220328160410-3

Are available license modules based on license tier?

No, they are not. Specific features can be added regardless of the license tier.

What happens after license expiration?

Once the license expires, the endpoints are automatically uninstalled in 30 days. A red banner warns the dashboard users.

What happens to the events for an agent when it is uninstalled or auto-uninstalled?

Events cannot be seen through the normal means, but they do still exist until the default retention period runs out. 

What is the default data log retention period within ReaQta Hive?

The default log retention period is 30 days.

How can you search for events of unregistered endpoints?

If there is an MSSP deployment, the only user that would have the permissions to see these events is the Super Administrator with a Global view.

Do licenses deploy to the endpoints?

No, they do not. License is completely server side. Thus, it does not propagate to the endpoint agents.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSVOEH","label":"IBM Security ReaQta"},"ARM Category":[{"code":"a8m3p000000hBSJAA2","label":"Licensing"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Product Synonym

ReaQta

Document Information

Modified date:
17 May 2023

UID

ibm16562997