Notifications
Clear all
Topic starter
18/11/2022 7:32 pm
What approach does QRadar take when it imposes EPS license (not hardware) limits on events that temporarily spike above that limit?
- A . Excessive events in a spike cause a System Notification that advises the customer to increase their EPS license allocation.
B. QRadar EPS license allocation is implemented with a hard cutoff to ensure resources are not saturated.
C. During the spike, excess events are written to a queue, and they are processed after the EPS rate drops.
D. QRadar EPS licensing is measured as an average over a 24-hour period, which allows spikes to be handled gracefully.
Suggested Answer: D