PdfPrep.com

Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?

Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?
A . Log Only (exclude Analytics)
B . Delete data When storage space is required
C . Bypass Correlation
D . Delete data immediately after the retention period has expired

Answer: A

Explanation:

Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_adm_data_store.html

Exit mobile version