An Administrator is tasked with installing additional log sources into an IBM Security QRadar SIEM V7.2.8 deployment, bringing the total number of log source to 900. The deployment is using the default license and the Administrator is getting an error attempting to add these additional log sources. Why is this error happening?
An Administrator working within IBM Security QRadar SIEM V7.2.8 has a network hierarchy that cannot support anymore network objects. To remedy this, they want to implement a supernet. Some of the customer CIDRs are:
- 209.60.128.0/24
- 209.60.129.0/24
- 209.60.130.0/24
- 209.60.131.0/24
Which supernet should be used to shrink the amount of network objects for the supplied group of CIDRs?
An Administrator has configured a customized log source extension to provide asset updates to IBM Security QRadar SIEM V7.2.8. Instead of QRadar receiving an update that has the host name of the asset that the user logged in to, the log source generates many asset updates that all have the same host name.
In this situation what will QRadar report?
When replacing a Console appliance in an IBM Security QRadar SIEM V7.2.8 deployment using a new IP address or host name, what must be the same on the two Console appliances?