IBM QRadar

Neel Jotani posted Wed February 26, 2025 07:27 AM  Best Answer

Hello,

Disaster Recovery (DR) Licenses:

• Purpose: DR licenses are designed to support QRadar deployments in disaster recovery scenarios. They enable establishing a secondary (destination) site that mirrors the primary (main) site, ensuring continuity in case of failures.
• Functionality: You can set up a remote QRadar console with a DR license on the destination site. This setup allows for the backup of configurations, certificates, and data from the main site to the destination site. In the event of a main site outage, operations can be switched to the destination site to maintain functionality. IBM
• Usage Constraints: DR licenses are intended specifically for disaster recovery purposes. They are not designed for use in non-DR sites or as primary operational licenses.

Data Synchronization App Licenses:

• Purpose: The IBM QRadar Data Synchronization App provides resilience by automatically mirroring QRadar configurations and data from the leading site to an identical QRadar system at a secondary site.
• Functionality: This app facilitates the replication of event and flow data and configuration files, ensuring that the secondary system remains synchronized with the primary system. In case of a failure at the main site, the secondary system can take over operations with minimal disruption. IBM
• Licensing Requirements: To utilize the Data Synchronization App, you must purchase a separate Data Synchronization license for each node where data is being transferred. For example, if your main site consists of one console and two event processors, and you have an identical setup at the DR site, you would need three Data Synchronization licenses for the DR site. IBM Community

Distinction Between DR Licenses and Data Synchronization Licenses:

• Scope of Use: DR licenses are specific to setting up a standby console at a disaster recovery site, primarily focusing on configuration and system readiness. In contrast, Data Synchronization licenses cover the active replication of data and configurations between the main and secondary sites, ensuring both systems are in sync.
• Operational Use: While a DR license prepares a secondary console for potential failover, the Data Synchronization App actively maintains data consistency between sites, enabling seamless transitions during failovers.

Thank you