Can I have the DR QRadar SIEM active?
if I can, will the data from the MAIN site appear in the DR Qradar?
Hi Karim
yes you can, however data will not show up by default. What you need as an addon is data sync app installed. Pls have a look at the documentation at https://www.ibm.com/docs/en/qsip/7.5?topic=recovery-data-redundancy-in-qradar-deployments