IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  How to calculate Average FPS/FPM

    Posted Tue June 06, 2023 10:08 AM

    Hi ,

    what is the best way to identify the Flow utilization. I found below tech note for events as it is not applicable for Flows. 

    Is there any tech note/document available to calculate the Average Flows Per Second or Flows Per Minute (FPS/FPM).

    QRadar: How to troubleshoot peak Events Per Second

    Ibm remove preview
    QRadar: How to troubleshoot peak Events Per Second
    The EPS (Events Per Second) rate is one of the most important performance metrics in QRadar.This metric is critical to assess whether a QRadar deployment is scaled and licensed correctly for the event volume received.Licensing based on EPS rate is enforced at the ecs-ec-ingress process.
    View this on Ibm >



    ------------------------------
    SP
    ------------------------------



  • 2.  RE: How to calculate Average FPS/FPM

    Posted Tue June 06, 2023 01:59 PM

    Yes, you can create your own AQL and convert it to a Time Series Graph in the Pulse app. There is documentation on this here: https://www.ibm.com/docs/en/qradar-common?topic=pulse-tracking-flow-data-trends-over-24-hours 



    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------

    Original Message