Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

  • 1.  IBM QrRadar

    Posted 01/11/21 07:48 AM
    HI,

    since start of this year i have been receiving the SAR sentinel: Threshhold crossed warning in my notifications and since 6th of jan 2020 i have not received any event in y log activity and i have tried everything i a on latest version i.e 7.4.2 
     The Logs are being received by the collector as i have verified this through dumps but for some reason they are not being picked up by console 

    Pls any clue would be very helpful. I have restarted services, rebooted the system , checked EPS and FPM. 
    I am unable to pinpoint the issue 



    ------------------------------
    Rija Fida Ullah Tipu
    ------------------------------


  • 2.  RE: IBM QrRadar

    Posted 01/12/21 10:21 AM
    Hello Rija,

    It sounds like you may be hitting the issue described in this technote - if you have not yet applied the workaround I would try that.

    https://www.ibm.com/support/pages/node/6395080

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------



Related Content