IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Set EPS limitation

    Posted Fri April 26, 2024 02:21 PM

    Hi ,
    I would like to know if there is a way to set EPS limitation per log source on Qradar.


    Thanks



    ------------------------------
    Benjamin Yabre
    ------------------------------


  • 2.  RE: Set EPS limitation
    Best Answer

    Posted Mon April 29, 2024 07:52 PM

    Hi,
    this depends on the type of protocol used for the log source. Most "polling" protocols such as "Log File" or "JDBC" support EPS limitation with the parameter "EPS Throttle" which can be configured in the Log Source "Protocol" section. 



    ------------------------------
    Peter Wenzl
    ------------------------------



  • 3.  RE: Set EPS limitation

    Posted Tue April 30, 2024 08:15 AM

    Hi Peter,

    Thanks for your reply.



    ------------------------------
    Benjamin Yabre
    ------------------------------