IBM Security QRadar

 View Only

Rule Performance Analysis

  • 1.  Rule Performance Analysis

    Posted Tue May 07, 2019 09:45 AM
    Hi,

    With QRadar 7.3.2 has come Rule Performance Analysis feature. This is from the latest pdf Maintaining QRadar 101.

    "Analysis runs when performance degradation has been noticed in the processing pipeline if it has been enabled as a System Settings"
    "Can a rule performance be toggled manually?
    Yes, support has a command-line string that can be entered to force rule performance analysis"

    So we have to wait degradation to occur to see visualization :) 

    Can we get or do somebody have a command line string that is mentioned that support has so we can force rule performance analysis?

    If somebody has this please share

    Thanks

    Regards

    ------------------------------
    Vedran Goricki
    ------------------------------