IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Default Retention

    Posted 11/20/24 09:37 AM

    Hello, 

    -QRadar's default retention is 2 years, what is our disk utilization? What should I look at for disk utilization?

    -If we make these 2 years 2,5 years, do we have enough space to manage? How can I do this calculation?



    ------------------------------
    Zeynettin Asan
    ------------------------------


  • 2.  RE: Default Retention

    Posted 11/20/24 10:18 AM

    Hi Zeynettin

    The default retention in QRadar is 30 days

    https://www.ibm.com/docs/en/qsip/7.5?topic=tasks-data-retention

    You can use the following technote to calaculate the space usage in QRadar

    https://www.ibm.com/support/pages/qradar-how-calculate-storage-used-events-and-flows-day-qradar-host

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------



Related Content